Before anyone mentions it - I know I can't block DoH entirely, it's a game I can't entirely win, but I'm making an effort.

For all my DoH feeds (Firewall > pfBlockerNG > DNSBL > DNSBL) , I notice that certain hosts are whitelisted, I cannot find where this is configured. Perhaps I'm misinterpreting it?
I don't want these FQDNs whitelisted...

[ Dibdot_DoH ]			 Downloading update [ 11/25/24 08:19:54 ] .. 200 OK.
  Whitelist: 1dot1dot1dot1.cloudflare-dns.com|adblock.doh.mullvad.net|adult-filter-dns.cleanbrowsing.org|anycast.censurfridns.dk|anycast.dns.nextdns.io|basic.rethinkdns.com|blitz.ahadns.com|chrome.cloudflare-dns.com|chromium.dns.nextdns.io|clean.dnsforge.de|cloudflare-dns.com|dandelionsprout.asuscomm.com|deic-lgb.anycast.censurfridns.dk|deic-ore.anycast.censurfridns.dk|dns-doh.dnsforfamily.com|dns-dot.dnsforfamily.com|dns-tls.bitwiseshift.net|dns.adguard-dns.com|dns.alidns.com|dns.cmrg.net|dns.comss.one|dns.decloudus.com|dns.digitale-gesellschaft.ch|dns.futuredns.me|dns.google|dns.nextdns.io|dns.oszx.co|dns.pub|dns.quad9.net|dns.switch.ch|dns.twnic.tw|dns10.quad9.net|dns11.quad9.net|dns64.cloudflare-dns.com|dns64.dns.google|dnsforge.de|dnsotls.lab.nic.cl|dnsovertls.sinodun.com|dnsovertls1.sinodun.com|doh-2.seby.io|doh-de.blahdns.com|doh.360.cn|doh.applied-privacy.net|doh.centraleu.pi-dns.com|doh.cleanbrowsing.org|doh.dns.apple.com|doh.dns.sb|doh.dnslify.com|doh.eastas.pi-dns.com|doh.eastau.pi-dns.com|doh.eastus.pi-dns.com|doh.familyshield.opendns.com|doh.ffmuc.net|doh.la.ahadns.net|doh.libredns.gr|doh.mullvad.net|doh.nl.ahadns.net|doh.northeu.pi-dns.com|doh.opendns.com|doh.pub|doh.tiar.app|doh.tiarap.org|doh.westus.pi-dns.com|dooh.cloudflare-dns.com|dot-de.blahdns.com|dot.centraleu.pi-dns.com|dot.eastas.pi-dns.com|dot.eastau.pi-dns.com|dot.eastus.pi-dns.com|dot.ffmuc.net|dot.la.ahadns.net|dot.libredns.gr|dot.nl.ahadns.net|dot.northeu.pi-dns.com|dot.pub|dot.seby.io|dot.tiar.app|dot.westus.pi-dns.com|dot1.applied-privacy.net|family-filter-dns.cleanbrowsing.org|family.adguard-dns.com|family.canadianshield.cira.ca|family.cloudflare-dns.com|family.freedns.controld.com|firefox.dns.nextdns.io|freedns.controld.com|getdnsapi.net|hard.dnsforge.de|ibksturm.synology.me|jp.tiar.app|jp.tiarap.org|mask-api.icloud.com|mask-h2.icloud.com|mask.icloud.com|max.rethinkdns.com|mozilla.cloudflare-dns.com|odoh.cloudflare-dns.com|odvr.nic.cz|one.one.one.one|opera.cloudflare-dns.com|p0.freedns.controld.com|p1.freedns.controld.com|p2.freedns.controld.com|p3.freedns.controld.com|privacydns.go6lab.si|private.canadianshield.cira.ca|protected.canadianshield.cira.ca|public.dns.iij.jp|rgnet-iad.anycast.censurfridns.dk|security-filter-dns.cleanbrowsing.org|security.cloudflare-dns.com|tor.cloudflare-dns.com|uncensored.freedns.controld.com|unfiltered.adguard-dns.com|unicast.censurfridns.dk|use-application-dns.net|zero.dns0.eu|
  ----------------------------------------------------------------------
  Orig.    Unique     # Dups     # White    # TOP1M    Final                
  ----------------------------------------------------------------------
  1539     1539       117        117        0          1305                 
  ----------------------------------------------------------------------