OK this is fixed. I had followed instructions to port-forward traffic to port 53 on opnsense to run mimugmail's adguard home. My instructions follow to help anyone else out of a similar jam. I disabled the port forward and instead put on two firewall rule for LAN as follows: Rule 1:ALLOWSource: [Google_devices] -- this is an alias set up with all IP for my google devicesSource Port: *Destination: !Lan addressDestination Port: 53 (DNS)Rule 2:REJECTSource: *Source Port: *Destination: !Lan addressDestination Port: 53 (DNS)