DNSBL groups not filtering

rgelfand

Thanks Gertjan. Based on your post, I see where I went wrong with pfblockerng.

I enabled doh/dot blocking. This ultimately interferes with dnsbl filtering.

I had since disabled it, see below. But I am still not clear on what this doh/dot blocking is for. When I enabled this block, shouldn't it have forced regular dns lookup(udp/tcp 53) and filtering?

Also, unless I am wrong here, if there is doh/dot server which is not well known, then pfblockerng doesn't work. How to deal with a situation like this.