Hello!

I have problems with users using DoH (DNS over HTTPS) on my network. MikroTik router (hAP ac2) is used as a main router and DNS server with static addresses pointing to our local web application server. By using proper dst-nat or redirect entries (both methods works well) for UDP and TCP ports I have managed to redirect DNS request form users which use their own DNS entries.
The problem is with DoH which by design can not be redirected by such simple methods. I found out that some Android phones have DoH enabled in Chrome browser by default which poses a problem in my case.

From what I have found it seems I can make list of DoH servers and block them on firewall and hope that the device with blocked DoH request will try using normal DNS request which I can redirect.

Firewall configuration is not my forte so any configuration examples would be appreciated.

Few related questions:
1. Should I disable fasttrack when using firewall rules for all users?
2. Is it possible to use url with addresses to be blocked as a list for firewall? I think I saw something like this in DD-WRT. It would be easier for me to update multiple routers by updating the site or file on it.

DoH is a PITA and you canblocj them by using a IP-address. Fasttracking is no problem in this.

Yes you can use an address-list and you need to use domain one.one.one.one for Cloudflare.

Step 1: Add this filter rule:
/ip firewall filter
add action=drop chain=forward comment="block DoH" dst-address-list="DoH Servers"
Step 2: Add the servers:
/ip firewall address-list
add address=dns.google list="DoH Servers"
add address=buttflare-dns.com list="DoH Servers"
add address=dns9.quad9.net list="DoH Servers"
add address=dns10.quad9.net list="DoH Servers"
add address=doh.cleanbrowsing.org list="DoH Servers"
add address=dns.dnsoverhttps.net list="DoH Servers"
add address=doh.crypto.sx list="DoH Servers"
add address=doh.powerdns.org list="DoH Servers"
add address=doh-jp.blahdns.com list="DoH Servers"
add address=dns.dns-over-https.com list="DoH Servers"
add address=dns.rubyfish.cn list="DoH Servers"
add address=doh.captnemo.in list="DoH Servers"
add address=doh.tiar.app list="DoH Servers"
add address=dns-nyc.aaflalo.me list="DoH Servers"
add address=dns.adguard.com list="DoH Servers"
add address=dns-family.adguard.com list="DoH Servers"
add address=dns.alekberg.net list="DoH Servers"
add address=dns2.alekberg.net list="DoH Servers"
add address=dnsse.alekberg.net list="DoH Servers"
add address=dns.alidns.com list="DoH Servers"
add address=dns.aa.net.uk list="DoH Servers"
add address=doh.42l.fr list="DoH Servers"
add address=dohtrial.att.net list="DoH Servers"
add address=doh-fi.blahdns.com list="DoH Servers"
add address=doh-de.blahdns.com list="DoH Servers"
add address=doh-sg.blahdns.com list="DoH Servers"
add address=dns.brahma.world list="DoH Servers"
add address=private.canadianshield.cira.ca list="DoH Servers"
add address=protected.canadianshield.cira.ca list="DoH Servers"
add address=family.canadianshield.cira.ca list="DoH Servers"
add address=doh.opendns.com list="DoH Servers"
add address=doh.familyshield.opendns.com list="DoH Servers"
add address=family-filter-dns.cleanbrowsing.org list="DoH Servers"
add address=adult-filter-dns.cleanbrowsing.org list="DoH Servers"
add address=security-filter-dns.cleanbrowsing.org list="DoH Servers"
add address=one.one.one.one list="DoH Servers"
add address=ns1.recursive.dnsbycomodo.com list="DoH Servers"
add address=ns2.recursive.dnsbycomodo.com list="DoH Servers"
add address=commons.host list="DoH Servers"
add address=dns.containerpi.com list="DoH Servers"
add address=dohdot.coxlab.net list="DoH Servers"
add address=doh-ipv6.crypto.sx list="DoH Servers"
add address=dns.digitale-gesellschaft.ch list="DoH Servers"
add address=doh.li list="DoH Servers"
add address=dnsforge.de list="DoH Servers"
add address=dns.dnshome.de list="DoH Servers"
add address=doh.dnslify.com list="DoH Servers"
add address=a.ns.dnslify.com list="DoH Servers"
add address=b.ns.dnslify.com list="DoH Servers"
add address=a.safe.ns.dnslify.com list="DoH Servers"
add address=b.safe.ns.dnslify.com list="DoH Servers"
add address=a.family.ns.dnslify.com list="DoH Servers"
add address=b.family.ns.dnslify.com list="DoH Servers"
add address=doh.seby.io list="DoH Servers"
add address=doh-2.seby.io list="DoH Servers"
add address=1.1.1.2 list="DoH Servers"
add address=1.0.0.2 list="DoH Servers"
add address=1.1.1.3 list="DoH Servers"
add address=1.0.0.3 list="DoH Servers"
add address=104.18.26.128 list="DoH Servers"
add address=104.18.27.128 list="DoH Servers"
add address=104.18.2.55 list="DoH Servers"
add address=104.18.3.55 list="DoH Servers"
add address=93.177.65.183 list="DoH Servers"
add address=116.203.179.248 list="DoH Servers"
add address=5.45.107.88 list="DoH Servers"
add address=116.203.115.192 list="DoH Servers"
add address=35.231.247.227 list="DoH Servers"
add address=104.17.64.4 list="DoH Servers"
add address=104.17.65.4 list="DoH Servers"
add address=176.56.236.175 list="DoH Servers"
add address=176.103.130.131 list="DoH Servers"
add address=176.103.130.130 list="DoH Servers"
add address=176.103.130.132 list="DoH Servers"
add address=176.103.130.134 list="DoH Servers"
add address=37.252.185.229 list="DoH Servers"
add address=206.189.215.75 list="DoH Servers"
add address=104.24.120.142 list="DoH Servers"
add address=104.24.121.142 list="DoH Servers"
add address=159.69.198.101 list="DoH Servers"
add address=108.61.201.119 list="DoH Servers"
add address=185.228.169.168 list="DoH Servers"
add address=185.228.169.11 list="DoH Servers"
add address=185.228.169.9 list="DoH Servers"
add address=104.28.0.106 list="DoH Servers"
add address=104.28.1.106 list="DoH Servers"
add address=9.9.9.11 list="DoH Servers"
add address=74.82.42.42 list="DoH Servers"
add address=95.216.181.228 list="DoH Servers"
add address=31.220.42.65 list="DoH Servers"
add address=45.67.219.208 list="DoH Servers"
add address=185.213.26.187 list="DoH Servers"
add address=88.198.91.187 list="DoH Servers"
add address=188.60.252.16 list="DoH Servers"
add address=172.65.3.223 list="DoH Servers"
add address=217.169.20.222 list="DoH Servers"
add address=95.216.229.153 list="DoH Servers"
Step 3: That's it!

Per apple doh.dns.apple.com as well https://support.apple.com/en-us/HT210060

Updated, all known public doh servers.

You'll need to remove the actual doh server you use from this list (if it's included here).

/ip firewall address-list
add address=dns.google list="BANNED-DOH-SERVERS"
add address=buttflare-dns.com list="BANNED-DOH-SERVERS"
add address=dns9.quad9.net list="BANNED-DOH-SERVERS"
add address=dns10.quad9.net list="BANNED-DOH-SERVERS"
add address=doh.cleanbrowsing.org list="BANNED-DOH-SERVERS"
add address=dns.dnsoverhttps.net list="BANNED-DOH-SERVERS"
add address=doh.crypto.sx list="BANNED-DOH-SERVERS"
add address=doh.powerdns.org list="BANNED-DOH-SERVERS"
add address=doh-jp.blahdns.com list="BANNED-DOH-SERVERS"
add address=dns.dns-over-https.com list="BANNED-DOH-SERVERS"
add address=dns.rubyfish.cn list="BANNED-DOH-SERVERS"
add address=doh.captnemo.in list="BANNED-DOH-SERVERS"
add address=doh.tiar.app list="BANNED-DOH-SERVERS"
add address=dns-nyc.aaflalo.me list="BANNED-DOH-SERVERS"
add address=dns.adguard.com list="BANNED-DOH-SERVERS"
add address=dns-family.adguard.com list="BANNED-DOH-SERVERS"
add address=dns.alekberg.net list="BANNED-DOH-SERVERS"
add address=dns2.alekberg.net list="BANNED-DOH-SERVERS"
add address=dnsse.alekberg.net list="BANNED-DOH-SERVERS"
add address=dns.alidns.com list="BANNED-DOH-SERVERS"
add address=dns.aa.net.uk list="BANNED-DOH-SERVERS"
add address=doh.42l.fr list="BANNED-DOH-SERVERS"
add address=dohtrial.att.net list="BANNED-DOH-SERVERS"
add address=doh-fi.blahdns.com list="BANNED-DOH-SERVERS"
add address=doh-de.blahdns.com list="BANNED-DOH-SERVERS"
add address=doh-sg.blahdns.com list="BANNED-DOH-SERVERS"
add address=dns.brahma.world list="BANNED-DOH-SERVERS"
add address=private.canadianshield.cira.ca list="BANNED-DOH-SERVERS"
add address=protected.canadianshield.cira.ca list="BANNED-DOH-SERVERS"
add address=family.canadianshield.cira.ca list="BANNED-DOH-SERVERS"
add address=doh.opendns.com list="BANNED-DOH-SERVERS"
add address=doh.familyshield.opendns.com list="BANNED-DOH-SERVERS"
add address=family-filter-dns.cleanbrowsing.org list="BANNED-DOH-SERVERS"
add address=adult-filter-dns.cleanbrowsing.org list="BANNED-DOH-SERVERS"
add address=security-filter-dns.cleanbrowsing.org list="BANNED-DOH-SERVERS"
add address=one.one.one.one list="BANNED-DOH-SERVERS"
add address=ns1.recursive.dnsbycomodo.com list="BANNED-DOH-SERVERS"
add address=ns2.recursive.dnsbycomodo.com list="BANNED-DOH-SERVERS"
add address=commons.host list="BANNED-DOH-SERVERS"
add address=dns.containerpi.com list="BANNED-DOH-SERVERS"
add address=dohdot.coxlab.net list="BANNED-DOH-SERVERS"
add address=doh-ipv6.crypto.sx list="BANNED-DOH-SERVERS"
add address=dns.digitale-gesellschaft.ch list="BANNED-DOH-SERVERS"
add address=doh.li list="BANNED-DOH-SERVERS"
add address=dnsforge.de list="BANNED-DOH-SERVERS"
add address=dns.dnshome.de list="BANNED-DOH-SERVERS"
add address=doh.dnslify.com list="BANNED-DOH-SERVERS"
add address=a.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=b.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=a.safe.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=b.safe.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=a.family.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=b.family.ns.dnslify.com list="BANNED-DOH-SERVERS"
add address=doh.seby.io list="BANNED-DOH-SERVERS"
add address=doh-2.seby.io list="BANNED-DOH-SERVERS"
add address=1.1.1.2 list="BANNED-DOH-SERVERS"
add address=1.0.0.2 list="BANNED-DOH-SERVERS"
add address=1.1.1.3 list="BANNED-DOH-SERVERS"
add address=1.0.0.3 list="BANNED-DOH-SERVERS"
add address=104.18.26.128 list="BANNED-DOH-SERVERS"
add address=104.18.27.128 list="BANNED-DOH-SERVERS"
add address=104.18.2.55 list="BANNED-DOH-SERVERS"
add address=104.18.3.55 list="BANNED-DOH-SERVERS"
add address=93.177.65.183 list="BANNED-DOH-SERVERS"
add address=116.203.179.248 list="BANNED-DOH-SERVERS"
add address=5.45.107.88 list="BANNED-DOH-SERVERS"
add address=116.203.115.192 list="BANNED-DOH-SERVERS"
add address=35.231.247.227 list="BANNED-DOH-SERVERS"
add address=104.17.64.4 list="BANNED-DOH-SERVERS"
add address=104.17.65.4 list="BANNED-DOH-SERVERS"
add address=176.56.236.175 list="BANNED-DOH-SERVERS"
add address=176.103.130.131 list="BANNED-DOH-SERVERS"
add address=176.103.130.130 list="BANNED-DOH-SERVERS"
add address=176.103.130.132 list="BANNED-DOH-SERVERS"
add address=176.103.130.134 list="BANNED-DOH-SERVERS"
add address=37.252.185.229 list="BANNED-DOH-SERVERS"
add address=206.189.215.75 list="BANNED-DOH-SERVERS"
add address=104.24.120.142 list="BANNED-DOH-SERVERS"
add address=104.24.121.142 list="BANNED-DOH-SERVERS"
add address=159.69.198.101 list="BANNED-DOH-SERVERS"
add address=108.61.201.119 list="BANNED-DOH-SERVERS"
add address=185.228.169.168 list="BANNED-DOH-SERVERS"
add address=185.228.169.11 list="BANNED-DOH-SERVERS"
add address=185.228.169.9 list="BANNED-DOH-SERVERS"
add address=104.28.0.106 list="BANNED-DOH-SERVERS"
add address=104.28.1.106 list="BANNED-DOH-SERVERS"
add address=9.9.9.11 list="BANNED-DOH-SERVERS"
add address=74.82.42.42 list="BANNED-DOH-SERVERS"
add address=95.216.181.228 list="BANNED-DOH-SERVERS"
add address=31.220.42.65 list="BANNED-DOH-SERVERS"
add address=45.67.219.208 list="BANNED-DOH-SERVERS"
add address=185.213.26.187 list="BANNED-DOH-SERVERS"
add address=88.198.91.187 list="BANNED-DOH-SERVERS"
add address=188.60.252.16 list="BANNED-DOH-SERVERS"
add address=172.65.3.223 list="BANNED-DOH-SERVERS"
add address=217.169.20.222 list="BANNED-DOH-SERVERS"
add address=95.216.229.153 list="BANNED-DOH-SERVERS"
add address=doh.dns.apple.com comment=doh.dns.apple.com list="BANNED-DOH-SERVERS"
add address=doh.dscloud.me list="BANNED-DOH-SERVERS"
add address=dukun.de list="BANNED-DOH-SERVERS"
add address=dns.dutchwhite.nl list="BANNED-DOH-SERVERS"
add address=edgy-dns.com list="BANNED-DOH-SERVERS"
add address=dns.edison42.dev list="BANNED-DOH-SERVERS"
add address=adguard.ef67daisuki.club list="BANNED-DOH-SERVERS"
add address=hole.elbschloss.xyz list="BANNED-DOH-SERVERS"
add address=addns.jpr.space list="BANNED-DOH-SERVERS"
add address=dns.unerror.network list="BANNED-DOH-SERVERS"
add address=dns.elemental.software list="BANNED-DOH-SERVERS"
add address=dns.ellichua.com list="BANNED-DOH-SERVERS"
add address=www.elshad-adgh-dns.ru list="BANNED-DOH-SERVERS"
add address=dns.emiliyan.com list="BANNED-DOH-SERVERS"
add address=dns.extrawdw.net list="BANNED-DOH-SERVERS"
add address=fra1.eyecay.xyz list="BANNED-DOH-SERVERS"
add address=rdns.faelix.net list="BANNED-DOH-SERVERS"
add address=pdns.faelix.net list="BANNED-DOH-SERVERS"
add address=dnsvps.familiamv.ml list="BANNED-DOH-SERVERS"
add address=dns.fancyorg.at list="BANNED-DOH-SERVERS"
add address=dns.faze.dev list="BANNED-DOH-SERVERS"
add address=ag.ff0x.ca list="BANNED-DOH-SERVERS"
add address=doh.ffmuc.net list="BANNED-DOH-SERVERS"
add address=dns.filipccz.eu list="BANNED-DOH-SERVERS"
add address=findmethedns.info list="BANNED-DOH-SERVERS"
add address=dns01.flm9.net list="BANNED-DOH-SERVERS"
add address=ns1.flodns.net list="BANNED-DOH-SERVERS"
add address=ns2.flodns.net list="BANNED-DOH-SERVERS"
add address=dns.flymc.cc list="BANNED-DOH-SERVERS"
add address=dns.mipauns.com list="BANNED-DOH-SERVERS"
add address=gateway.fomichev.cloud list="BANNED-DOH-SERVERS"
add address=doh.applied-privacy.net list="BANNED-DOH-SERVERS"
add address=dns.froth.zone list="BANNED-DOH-SERVERS"
add address=doh.futa.gg list="BANNED-DOH-SERVERS"
add address=adguard.gbrossi.com.br list="BANNED-DOH-SERVERS"
add address=gclouddns.com list="BANNED-DOH-SERVERS"
add address=dns.gnb09.id list="BANNED-DOH-SERVERS"
add address=dns64.dns.google list="BANNED-DOH-SERVERS"
add address=8888.google list="BANNED-DOH-SERVERS"
add address=groupy.ga list="BANNED-DOH-SERVERS"
add address=doh2.gslb2.xfinity.com list="BANNED-DOH-SERVERS"
add address=gustamadh.dynv6.net list="BANNED-DOH-SERVERS"
add address=cluster-0.gac.edu list="BANNED-DOH-SERVERS"
add address=cluster-1.gac.edu list="BANNED-DOH-SERVERS"
add address=gztech.me list="BANNED-DOH-SERVERS"
add address=dns.ha-dvin.pp.ua list="BANNED-DOH-SERVERS"
add address=dns.hafidzradhival.my.id list="BANNED-DOH-SERVERS"
add address=adguard.haneulo.com list="BANNED-DOH-SERVERS"
add address=dns.haoxuan.xyz list="BANNED-DOH-SERVERS"
add address=us-ny-alula.heliumcloud.cc list="BANNED-DOH-SERVERS"
add address=ad1.heronet.nl list="BANNED-DOH-SERVERS"
add address=dns.hinet.net list="BANNED-DOH-SERVERS"
add address=hitian.me list="BANNED-DOH-SERVERS"
add address=pihole1.hoerli.net list="BANNED-DOH-SERVERS"
add address=pihole2.hoerli.net list="BANNED-DOH-SERVERS"
add address=pihole3.hoerli.net list="BANNED-DOH-SERVERS"
add address=pihole4.hoerli.net list="BANNED-DOH-SERVERS"
add address=home27.duckdns.org list="BANNED-DOH-SERVERS"
add address=dns.hostux.net list="BANNED-DOH-SERVERS"
add address=doth.huque.com list="BANNED-DOH-SERVERS"
add address=ordns.he.net list="BANNED-DOH-SERVERS"
add address=opennic.i2pd.xyz list="BANNED-DOH-SERVERS"
add address=adguard.ihatemy.live list="BANNED-DOH-SERVERS"
add address=ihctw.synology.me list="BANNED-DOH-SERVERS"
add address=dns.ikataruto.com list="BANNED-DOH-SERVERS"
add address=doh.buzz list="BANNED-DOH-SERVERS"
add address=doh.beauty list="BANNED-DOH-SERVERS"
add address=dns.imaicool.com list="BANNED-DOH-SERVERS"
add address=dns1.in-berlin.de list="BANNED-DOH-SERVERS"
add address=dns.indust.me list="BANNED-DOH-SERVERS"
add address=qlf-doh.inria.fr list="BANNED-DOH-SERVERS"
add address=doh.ibr.cs.tu-bs.de list="BANNED-DOH-SERVERS"
add address=public.dns.iij.jp list="BANNED-DOH-SERVERS"
add address=intertop.link list="BANNED-DOH-SERVERS"
add address=dns.invisv.com list="BANNED-DOH-SERVERS"
add address=dns.ipv6dns.com list="BANNED-DOH-SERVERS"
add address=irre.li list="BANNED-DOH-SERVERS"
add address=dns1.irumatech.com list="BANNED-DOH-SERVERS"
add address=dns.iamninja.ru list="BANNED-DOH-SERVERS"
add address=dns.itdept.pro list="BANNED-DOH-SERVERS"
add address=jackyes.ovh list="BANNED-DOH-SERVERS"
add address=tj.jamesxue.xyz list="BANNED-DOH-SERVERS"
add address=adguard.jfchenier.ca list="BANNED-DOH-SERVERS"
add address=adg.jnorton.us list="BANNED-DOH-SERVERS"
add address=dns.joaofidelix.com.br list="BANNED-DOH-SERVERS"
add address=dns.hahnjo.de list="BANNED-DOH-SERVERS"
add address=jp.tiar.app list="BANNED-DOH-SERVERS"
add address=jp.tiarap.org list="BANNED-DOH-SERVERS"
add address=adguard1.jsanagustin.net list="BANNED-DOH-SERVERS"
add address=dns.jucker.engineering list="BANNED-DOH-SERVERS"
add address=jurre-home.duckdns.org list="BANNED-DOH-SERVERS"
add address=dns.kamilszczepanski.com list="BANNED-DOH-SERVERS"
add address=dns.karl.one list="BANNED-DOH-SERVERS"
add address=dns.kawa.tf list="BANNED-DOH-SERVERS"
add address=keithchung.hopto.org list="BANNED-DOH-SERVERS"
add address=dns.kernel-error.de list="BANNED-DOH-SERVERS"
add address=dns.kescher.at list="BANNED-DOH-SERVERS"
add address=doh.killtw.im list="BANNED-DOH-SERVERS"
add address=adguard.avdkishore.dev list="BANNED-DOH-SERVERS"
add address=korzhov.dev list="BANNED-DOH-SERVERS"
add address=dart.kpsn.org list="BANNED-DOH-SERVERS"
add address=xray.krnl.eu list="BANNED-DOH-SERVERS"
add address=krtekvpn.duckdns.org list="BANNED-DOH-SERVERS"
add address=kswro.web.id list="BANNED-DOH-SERVERS"
add address=safe.kswro.web.id list="BANNED-DOH-SERVERS"
add address=doh.lacontrevoie.fr list="BANNED-DOH-SERVERS"
add address=dns.lars-lehmann.net list="BANNED-DOH-SERVERS"
add address=lastentarvike.fi list="BANNED-DOH-SERVERS"
add address=eu1.dns.lavate.ch list="BANNED-DOH-SERVERS"
add address=adguard1.leadmon.net list="BANNED-DOH-SERVERS"
add address=leecurrylawfirm.com list="BANNED-DOH-SERVERS"
add address=adguard.lege.despagne.net list="BANNED-DOH-SERVERS"
add address=externalmobiel.lekdijk.online list="BANNED-DOH-SERVERS"
add address=sby-doh.limotelu.org list="BANNED-DOH-SERVERS"
add address=lindung.pp.ua list="BANNED-DOH-SERVERS"
add address=orau.lz0724.com list="BANNED-DOH-SERVERS"
add address=dns.maolaohei.xyz list="BANNED-DOH-SERVERS"
add address=masters-of-cloud.de list="BANNED-DOH-SERVERS"
add address=adguard.meddy94.de list="BANNED-DOH-SERVERS"
add address=dns.meeo.win list="BANNED-DOH-SERVERS"
add address=chewbacca.meganerd.nl list="BANNED-DOH-SERVERS"
add address=testaghome.meshkov.info list="BANNED-DOH-SERVERS"
add address=securenet.mhsystems.net list="BANNED-DOH-SERVERS"
add address=dns.mikeliu.org list="BANNED-DOH-SERVERS"
add address=dns.truong.fi list="BANNED-DOH-SERVERS"
add address=dnstls.mobik.com list="BANNED-DOH-SERVERS"
add address=ps1.modr.club list="BANNED-DOH-SERVERS"
add address=dns.molinero.dev list="BANNED-DOH-SERVERS"
add address=dns.moog.sh list="BANNED-DOH-SERVERS"
add address=dns.moonssif.com list="BANNED-DOH-SERVERS"
add address=www.morbitzer.de list="BANNED-DOH-SERVERS"
add address=msr177.com list="BANNED-DOH-SERVERS"
add address=dns.msxnet.ru list="BANNED-DOH-SERVERS"
add address=doh.mullvad.net list="BANNED-DOH-SERVERS"
add address=adblock.doh.mullvad.net list="BANNED-DOH-SERVERS"
add address=blockerads.multimediaconcept.fr list="BANNED-DOH-SERVERS"
add address=dns.murgi.de list="BANNED-DOH-SERVERS"
add address=dns.muxinghe.cn list="BANNED-DOH-SERVERS"
add address=www.muxyuji.ru list="BANNED-DOH-SERVERS"
add address=freedom.mydns.network list="BANNED-DOH-SERVERS"
add address=echoe1yidzu4ioo5.myfritz.net list="BANNED-DOH-SERVERS"
add address=blackhole.myon.lu list="BANNED-DOH-SERVERS"
add address=vm.mytm.cc list="BANNED-DOH-SERVERS"
add address=area51.mywire.org list="BANNED-DOH-SERVERS"
add address=dns.mzrme.cn list="BANNED-DOH-SERVERS"
add address=n-wan.dynv6.net list="BANNED-DOH-SERVERS"
add address=dns.nas-server.ru list="BANNED-DOH-SERVERS"
add address=adguard.ender.fr list="BANNED-DOH-SERVERS"
add address=dns.norvig.dk list="BANNED-DOH-SERVERS"
add address=dns.neubsi.at list="BANNED-DOH-SERVERS"
add address=doh.luigi.nexific.it list="BANNED-DOH-SERVERS"
add address=dns.nextdns.io list="BANNED-DOH-SERVERS"
add address=dns.nhtsky.com list="BANNED-DOH-SERVERS"
add address=doh.lv list="BANNED-DOH-SERVERS"
add address=doh.nic.lv list="BANNED-DOH-SERVERS"
add address=doh.niyawe.de list="BANNED-DOH-SERVERS"
add address=dns.njal.la list="BANNED-DOH-SERVERS"
add address=resolver.noaddns.com list="BANNED-DOH-SERVERS"
add address=pi1.node15.com list="BANNED-DOH-SERVERS"
add address=sink.nolo.ltd list="BANNED-DOH-SERVERS"
add address=dns.novali.date list="BANNED-DOH-SERVERS"
add address=dns.novg.net list="BANNED-DOH-SERVERS"
add address=n5.lsasss.com list="BANNED-DOH-SERVERS"
add address=dns8.org list="BANNED-DOH-SERVERS"
add address=n0.eu list="BANNED-DOH-SERVERS"
add address=ns3.com list="BANNED-DOH-SERVERS"
add address=ns3.cx list="BANNED-DOH-SERVERS"
add address=ns3.link list="BANNED-DOH-SERVERS"
add address=dns.nullgate.net list="BANNED-DOH-SERVERS"
add address=o1.lt list="BANNED-DOH-SERVERS"
add address=dns.ofdoom.net list="BANNED-DOH-SERVERS"
add address=secure.onedns.cc list="BANNED-DOH-SERVERS"
add address=doh.onedns.net list="BANNED-DOH-SERVERS"
add address=a-bld.sys-adm.in list="BANNED-DOH-SERVERS"
add address=bld.sys-adm.in list="BANNED-DOH-SERVERS"
add address=dns.opnsource.com.au list="BANNED-DOH-SERVERS"
add address=osefcorp.duckdns.org list="BANNED-DOH-SERVERS"
add address=1a.ns.ozer.im list="BANNED-DOH-SERVERS"
add address=dns.paesa.es list="BANNED-DOH-SERVERS"
add address=dns.panszelescik.pl list="BANNED-DOH-SERVERS"
add address=doh.gcp.pathofgrace.com list="BANNED-DOH-SERVERS"
add address=adguard.piekacz.pl list="BANNED-DOH-SERVERS"
add address=thanos.pleumkungz.com list="BANNED-DOH-SERVERS"
add address=dns.porteii.com list="BANNED-DOH-SERVERS"
add address=dns.privilab.net list="BANNED-DOH-SERVERS"
add address=project-evoex.de list="BANNED-DOH-SERVERS"
add address=punono.duckdns.org list="BANNED-DOH-SERVERS"
add address=puredns.org list="BANNED-DOH-SERVERS"
add address=doh.pyry.me list="BANNED-DOH-SERVERS"
add address=doh.360.cn list="BANNED-DOH-SERVERS"
add address=ns1.qquack.org list="BANNED-DOH-SERVERS"
add address=dns.quad9.net list="BANNED-DOH-SERVERS"
add address=dns11.quad9.net list="BANNED-DOH-SERVERS"
add address=ant.dns.qwer.pw list="BANNED-DOH-SERVERS"
add address=dog.dns.qwer.pw list="BANNED-DOH-SERVERS"
add address=lion.dns.qwer.pw list="BANNED-DOH-SERVERS"
add address=tiger.dns.qwer.pw list="BANNED-DOH-SERVERS"
add address=frog.dns.qwer.pw list="BANNED-DOH-SERVERS"
add address=resolver.r0cket.net list="BANNED-DOH-SERVERS"
add address=r1bnc.com list="BANNED-DOH-SERVERS"
add address=adguard.rabmoor.cz list="BANNED-DOH-SERVERS"
add address=dns.rafn.is list="BANNED-DOH-SERVERS"
add address=ag.ssrahul96.xyz list="BANNED-DOH-SERVERS"
add address=rayneau.fr list="BANNED-DOH-SERVERS"
add address=dns.reckoningslug.name list="BANNED-DOH-SERVERS"
add address=kaitain.restena.lu list="BANNED-DOH-SERVERS"
add address=basic.rethinkdns.com list="BANNED-DOH-SERVERS"
add address=sky.rethinkdns.com list="BANNED-DOH-SERVERS"
add address=doh.rezhajul.io list="BANNED-DOH-SERVERS"
add address=resolver.rferee.dev list="BANNED-DOH-SERVERS"
add address=dns.rin.sh list="BANNED-DOH-SERVERS"
add address=dns.ronc.ru list="BANNED-DOH-SERVERS"
add address=dns.rotunneling.net list="BANNED-DOH-SERVERS"
add address=adguard-dns.rouga.ch list="BANNED-DOH-SERVERS"
add address=safeservedns.com list="BANNED-DOH-SERVERS"
add address=doh.safesurfer.io list="BANNED-DOH-SERVERS"
add address=o.rsaikat.com list="BANNED-DOH-SERVERS"
add address=sbdns.co.in list="BANNED-DOH-SERVERS"
add address=dns.sellan.fr list="BANNED-DOH-SERVERS"
add address=shalenkov.dev list="BANNED-DOH-SERVERS"
add address=free.shecan.ir list="BANNED-DOH-SERVERS"
add address=dns.shecan.ir list="BANNED-DOH-SERVERS"
add address=pro.shecan.ir list="BANNED-DOH-SERVERS"
add address=do.shimul.me list="BANNED-DOH-SERVERS"
add address=dns.shimul.me list="BANNED-DOH-SERVERS"
add address=adguard.shuting.idv.tw list="BANNED-DOH-SERVERS"
add address=dns.silen.org list="BANNED-DOH-SERVERS"
add address=dns.silentlybren.com list="BANNED-DOH-SERVERS"
add address=dns.siry.de list="BANNED-DOH-SERVERS"
add address=sitdns.com list="BANNED-DOH-SERVERS"
add address=dns.skrep.eu list="BANNED-DOH-SERVERS"
add address=dns.slinkyman.net list="BANNED-DOH-SERVERS"
add address=adg.geili.me list="BANNED-DOH-SERVERS"
add address=clientdns3.softcom.net list="BANNED-DOH-SERVERS"
add address=dns.spil.co.id list="BANNED-DOH-SERVERS"
add address=dns.startupstack.tech list="BANNED-DOH-SERVERS"
add address=muli.stusta.mhn.de list="BANNED-DOH-SERVERS"
add address=esel.stusta.mhn.de list="BANNED-DOH-SERVERS"
add address=dns.stvsk.ml list="BANNED-DOH-SERVERS"
add address=guard.sntrk.ru list="BANNED-DOH-SERVERS"
add address=dns.surfshark.com list="BANNED-DOH-SERVERS"
add address=surt.ml list="BANNED-DOH-SERVERS"
add address=dns.switch.ch list="BANNED-DOH-SERVERS"
add address=dns.syaifullah.com list="BANNED-DOH-SERVERS"
add address=doh.syshero.org list="BANNED-DOH-SERVERS"
add address=dns.t53.de list="BANNED-DOH-SERVERS"
add address=dns.telekom.de list="BANNED-DOH-SERVERS"
add address=de.teradns.org list="BANNED-DOH-SERVERS"
add address=ny.teradns.org list="BANNED-DOH-SERVERS"
add address=tx.teradns.org list="BANNED-DOH-SERVERS"
add address=sg.teradns.org list="BANNED-DOH-SERVERS"
add address=cloud.tezoi.com list="BANNED-DOH-SERVERS"
add address=dns.therifleman.name list="BANNED-DOH-SERVERS"
add address=doh.tiarap.org list="BANNED-DOH-SERVERS"
add address=timmes.nl list="BANNED-DOH-SERVERS"
add address=tk31z.com list="BANNED-DOH-SERVERS"
add address=dns.tls-data.de list="BANNED-DOH-SERVERS"
add address=tlz.asia list="BANNED-DOH-SERVERS"
add address=d.toairs.com list="BANNED-DOH-SERVERS"
add address=toaster.lol list="BANNED-DOH-SERVERS"
add address=doh.totoro.pub list="BANNED-DOH-SERVERS"
add address=dns.apigw.online list="BANNED-DOH-SERVERS"
add address=tuandns.duckdns.org list="BANNED-DOH-SERVERS"
add address=tungdnsne.duckdns.org list="BANNED-DOH-SERVERS"
add address=dns.twnic.tw list="BANNED-DOH-SERVERS"
add address=dns-east.tylerwahl.com list="BANNED-DOH-SERVERS"
add address=typaza.com list="BANNED-DOH-SERVERS"
add address=ueni.dyndns.org list="BANNED-DOH-SERVERS"
add address=galileo.math.unipd.it list="BANNED-DOH-SERVERS"
add address=unixfox.duckdns.org list="BANNED-DOH-SERVERS"
add address=resolver.unstoppable.io list="BANNED-DOH-SERVERS"
add address=tor.vasi.li list="BANNED-DOH-SERVERS"
add address=securedns.vendorvista.xyz list="BANNED-DOH-SERVERS"
add address=dns.vinnyp.xyz list="BANNED-DOH-SERVERS"
add address=virga.pp.ua list="BANNED-DOH-SERVERS"
add address=dns.vmath.my.id list="BANNED-DOH-SERVERS"
add address=dns.wakgood.net list="BANNED-DOH-SERVERS"
add address=wantaquddin.com list="BANNED-DOH-SERVERS"
add address=doh.xcom.pro list="BANNED-DOH-SERVERS"
add address=xenergy.cc list="BANNED-DOH-SERVERS"
add address=yarp.lefolgoc.net list="BANNED-DOH-SERVERS"
add address=lion.yazilimatolye.com list="BANNED-DOH-SERVERS"
add address=ychen.cf list="BANNED-DOH-SERVERS"
add address=ychen.ga list="BANNED-DOH-SERVERS"
add address=dns.youni.win list="BANNED-DOH-SERVERS"
add address=yovbak.com list="BANNED-DOH-SERVERS"
add address=dns.zfsystem.tech list="BANNED-DOH-SERVERS"
add address=zxcvb.pp.ua list="BANNED-DOH-SERVERS"
add address=dns.0ooo.icu list="BANNED-DOH-SERVERS"
add address=ns1.1899.com.mx list="BANNED-DOH-SERVERS"
add address=ns2.1899.com.mx list="BANNED-DOH-SERVERS"
add address=t2c.240130034.xyz list="BANNED-DOH-SERVERS"
add address=doh003.280blocker.net list="BANNED-DOH-SERVERS"
add address=dns.52306.org list="BANNED-DOH-SERVERS"
add address=dns.5ososea.com list="BANNED-DOH-SERVERS"
add address=family.5ososea.com list="BANNED-DOH-SERVERS"
add address=kids.5ososea.com list="BANNED-DOH-SERVERS"
add address=jp.68360612.xyz list="BANNED-DOH-SERVERS"
add address=dns.7vpn.com list="BANNED-DOH-SERVERS"
add address=dns.886886886.xyz list="BANNED-DOH-SERVERS"
add address=ibuki.cgnat.net list="BANNED-DOH-SERVERS"
add address=aattwwss.duckdns.org list="BANNED-DOH-SERVERS"
add address=dns.aaytorr.com list="BANNED-DOH-SERVERS"
add address=abel.waringer-atg.de list="BANNED-DOH-SERVERS"
add address=res-acst1.absolight.net list="BANNED-DOH-SERVERS"
add address=res-acst2.absolight.net list="BANNED-DOH-SERVERS"
add address=res-acst3.absolight.net list="BANNED-DOH-SERVERS"
add address=resolver1.absolight.net list="BANNED-DOH-SERVERS"
add address=resolver2.absolight.net list="BANNED-DOH-SERVERS"
add address=resolver3.absolight.net list="BANNED-DOH-SERVERS"
add address=block.abstergo.it list="BANNED-DOH-SERVERS"
add address=adl.adfilter.net list="BANNED-DOH-SERVERS"
add address=per.adfilter.net list="BANNED-DOH-SERVERS"
add address=syd.adfilter.net list="BANNED-DOH-SERVERS"
add address=unfiltered.adguard-dns.com list="BANNED-DOH-SERVERS"
add address=adguardh.ga list="BANNED-DOH-SERVERS"
add address=dns.adrianlam.com list="BANNED-DOH-SERVERS"
add address=shield.afixer.app list="BANNED-DOH-SERVERS"
add address=blitz.ahadns.com list="BANNED-DOH-SERVERS"
add address=doh.nl.ahadns.net list="BANNED-DOH-SERVERS"
add address=aihe.app list="BANNED-DOH-SERVERS"
add address=airmaxcloud.ml list="BANNED-DOH-SERVERS"
add address=dnsnl.alekberg.net list="BANNED-DOH-SERVERS"
add address=dnsnl-noads.alekberg.net list="BANNED-DOH-SERVERS"
add address=dnsse-noads.alekberg.net list="BANNED-DOH-SERVERS"
add address=dns.alloxr.info list="BANNED-DOH-SERVERS"
add address=dns.almir1904.eu list="BANNED-DOH-SERVERS"
add address=adguard.ambiya.net list="BANNED-DOH-SERVERS"
add address=dns.amigo-mgn.ru list="BANNED-DOH-SERVERS"
add address=mailer.amlegion.org list="BANNED-DOH-SERVERS"
add address=dns.andrewnw.xyz list="BANNED-DOH-SERVERS"
add address=d.apemlegit.my.id list="BANNED-DOH-SERVERS"
add address=armorrush.eu.org list="BANNED-DOH-SERVERS"
add address=dns.artikel10.org list="BANNED-DOH-SERVERS"
add address=dns.b612.me list="BANNED-DOH-SERVERS"
add address=secure.avastdns.com list="BANNED-DOH-SERVERS"
add address=dns.keweon.center list="BANNED-DOH-SERVERS"
add address=awan.ftp.sh list="BANNED-DOH-SERVERS"
add address=pihole.aws.ketan.dev list="BANNED-DOH-SERVERS"
add address=axaxa.fun list="BANNED-DOH-SERVERS"
add address=dns.b33.space list="BANNED-DOH-SERVERS"
add address=sg-dns1.bancuh.com list="BANNED-DOH-SERVERS"
add address=fr-dns1.bancuh.com list="BANNED-DOH-SERVERS"
add address=jp-dns1.bancuh.com list="BANNED-DOH-SERVERS"
add address=bcandrade.ml list="BANNED-DOH-SERVERS"
add address=dns.bebasid.com list="BANNED-DOH-SERVERS"
add address=adguard.beliefanx.cn list="BANNED-DOH-SERVERS"
add address=dns.belnet.be list="BANNED-DOH-SERVERS"
add address=dns.benpro.fr list="BANNED-DOH-SERVERS"
add address=ns3.bit-trail.nl list="BANNED-DOH-SERVERS"
add address=dns.bitdefender.net list="BANNED-DOH-SERVERS"
add address=adguard.bitteeinbyte.de list="BANNED-DOH-SERVERS"
add address=doh-ch.blahdns.com list="BANNED-DOH-SERVERS"
add address=us1.blissdns.net list="BANNED-DOH-SERVERS"
add address=dns.blokada.org list="BANNED-DOH-SERVERS"
add address=bluemood.me list="BANNED-DOH-SERVERS"
add address=dns.bobstrecansky.com list="BANNED-DOH-SERVERS"
add address=doh.boje8.me list="BANNED-DOH-SERVERS"
add address=doh.bortzmeyer.fr list="BANNED-DOH-SERVERS"
add address=cloudns.bosco.ovh list="BANNED-DOH-SERVERS"
add address=dns.brian-hong.tech list="BANNED-DOH-SERVERS"
add address=doh.bt.com list="BANNED-DOH-SERVERS"
add address=doh1.b-cdn.net list="BANNED-DOH-SERVERS"
add address=dns.bw.i81.ru list="BANNED-DOH-SERVERS"
add address=www.c-dns.com list="BANNED-DOH-SERVERS"
add address=dns.carson-family.com list="BANNED-DOH-SERVERS"
add address=dns2.cbio.top list="BANNED-DOH-SERVERS"
add address=doh.ccb-net.it list="BANNED-DOH-SERVERS"
add address=doh-01.spectrum.com list="BANNED-DOH-SERVERS"
add address=doh-02.spectrum.com list="BANNED-DOH-SERVERS"
add address=dns.chenu.ch list="BANNED-DOH-SERVERS"
add address=dns.chromeina.top list="BANNED-DOH-SERVERS"
add address=oraclejp2.chungyu.com list="BANNED-DOH-SERVERS"
add address=dns.clanless.ovh list="BANNED-DOH-SERVERS"
add address=cvt-ic-us-adns-001.clearviewtechnology.net list="BANNED-DOH-SERVERS"
add address=cloudflare-dns.com list="BANNED-DOH-SERVERS"
add address=mozilla.cloudflare-dns.com list="BANNED-DOH-SERVERS"
add address=security.cloudflare-dns.com list="BANNED-DOH-SERVERS"
add address=family.cloudflare-dns.com list="BANNED-DOH-SERVERS"
add address=dns64.cloudflare-dns.com list="BANNED-DOH-SERVERS"
add address=dns-secondary.cloudnx.cloud list="BANNED-DOH-SERVERS"
add address=jpdns.cola16.app list="BANNED-DOH-SERVERS"
add address=doh.xfinity.com list="BANNED-DOH-SERVERS"
add address=dns.comeonjames.club list="BANNED-DOH-SERVERS"
add address=dns.circl.lu list="BANNED-DOH-SERVERS"
add address=dns.comss.one list="BANNED-DOH-SERVERS"
add address=dns.connect.fail list="BANNED-DOH-SERVERS"
add address=freedns.controld.com list="BANNED-DOH-SERVERS"
add address=cossxiu.ga list="BANNED-DOH-SERVERS"
add address=dns.cwlys.com list="BANNED-DOH-SERVERS"
add address=odvr.nic.cz list="BANNED-DOH-SERVERS"
add address=dns.d365.in list="BANNED-DOH-SERVERS"
add address=dns.d94.xyz list="BANNED-DOH-SERVERS"
add address=dns.d96.info list="BANNED-DOH-SERVERS"
add address=adguard.dtness.com list="BANNED-DOH-SERVERS"
add address=dns.daw.dev list="BANNED-DOH-SERVERS"
add address=ns.00dani.me list="BANNED-DOH-SERVERS"
add address=darkness.is.my.waifu.cz list="BANNED-DOH-SERVERS"
add address=mail.data.haus list="BANNED-DOH-SERVERS"
add address=doh.datacore.ch list="BANNED-DOH-SERVERS"
add address=doh.datahata.by list="BANNED-DOH-SERVERS"
add address=pihole.datamatter.co.za list="BANNED-DOH-SERVERS"
add address=dns.decloudus.com list="BANNED-DOH-SERVERS"
add address=adguard.dekonix.ru list="BANNED-DOH-SERVERS"
add address=adguard.depieri.net list="BANNED-DOH-SERVERS"
add address=adguard.dessoi.cloud list="BANNED-DOH-SERVERS"
add address=doh-primary-pool.detoxifypornblocker.com list="BANNED-DOH-SERVERS"
add address=mainframe.dewed.de list="BANNED-DOH-SERVERS"
add address=dgca.myds.me list="BANNED-DOH-SERVERS"
add address=dns.dgea.fr list="BANNED-DOH-SERVERS"
add address=doh.disconnect.app list="BANNED-DOH-SERVERS"
add address=open.dns0.eu list="BANNED-DOH-SERVERS"
add address=dns0.eu list="BANNED-DOH-SERVERS"
add address=zero.dns0.eu list="BANNED-DOH-SERVERS"
add address=kids.dns0.eu list="BANNED-DOH-SERVERS"
add address=dns-doh.dnsforfamily.com list="BANNED-DOH-SERVERS"
add address=dns.digitalsize.net list="BANNED-DOH-SERVERS"
add address=dns.linkr.ninja list="BANNED-DOH-SERVERS"
add address=ttag.dns.nomu.pw list="BANNED-DOH-SERVERS"
add address=doh.dns.sb list="BANNED-DOH-SERVERS"
add address=doh.sb list="BANNED-DOH-SERVERS"
add address=apne1.dns.terumi.club list="BANNED-DOH-SERVERS"
add address=doh.dns4all.eu list="BANNED-DOH-SERVERS"
add address=nz01.dns4me.net list="BANNED-DOH-SERVERS"
add address=au01.dns4me.net list="BANNED-DOH-SERVERS"
add address=au02.dns4me.net list="BANNED-DOH-SERVERS"
add address=sg01.dns4me.net list="BANNED-DOH-SERVERS"
add address=uk01.dns4me.net list="BANNED-DOH-SERVERS"
add address=us01.dns4me.net list="BANNED-DOH-SERVERS"
add address=us02.dns4me.net list="BANNED-DOH-SERVERS"
add address=sa01.dns4me.net list="BANNED-DOH-SERVERS"
add address=ca01.dns4me.net list="BANNED-DOH-SERVERS"
add address=ca02.dns4me.net list="BANNED-DOH-SERVERS"
add address=www.dnsadguard.co.uk list="BANNED-DOH-SERVERS"
add address=dnsenc.com list="BANNED-DOH-SERVERS"
add address=dnslow.me list="BANNED-DOH-SERVERS"
add address=dns.pub list="BANNED-DOH-SERVERS"
add address=dns.dnswarden.com list="BANNED-DOH-SERVERS"
add address=ns1.dotls.org list="BANNED-DOH-SERVERS"