"Block DNS Tunneling"

[mb]

@Fawkesguy - my pleasure.

You already have that option now. It blocks our list of DoH systems. Just block "DNS over HTTPS" application under Network Management Category under App Controls.

For custom DoH systems, we'll be employing aforementioned mechanisms.

[allebone]

I tested with the firefox built in dns over https option and this policy blocks it in sensei already: