Indeed, if you control over DNS you have to advertise your own DNS server than blocking outgoing DNS requests for everything except you nameserver (UDP and TCP)

Indeed, if you control over DNS you have to advertise your own DNS server than blocking outgoing DNS requests for everything except you nameserver (UDP and TCP). Sadly DNS over HTTPS takes this control away from you.