I suppose with DNS level blocking of ads now impossible that means I will need to crawl my DNS blocklist and resolve those domains, then block those IP addresse

I suppose with DNS level blocking of ads now impossible that means I will need to crawl my DNS blocklist and resolve those domains, then block those IP addresses at the network gateway... Even if clients punch out through a secret DoH ip those resolved advertiser domains will still be null routed. Not as easy but just as effective.