Put those devices on a separate subnet would be the easiest way. In order of technical complexity: * Buy a second router, plug it into your existing one, set t

Put those devices on a separate subnet would be the easiest way. In order of technical complexity: * Buy a second router, plug it into your existing one, set the DHCP options to point to 1.1.1.2 * Reconfigure your existing router to add a second subnet (192.168.2.0/24 etc) with its own SSID * Use DHCP reservations to push 1.1.1.1 to known devices (adults) and 1.1.1.2 to all others; it could be done the other way, but all iPhones/Macs can randomize MAC addresses making evasion very simple There may be a way to do this inside Pi-Hole, but it would probably be based on IP range rather than MAC address, which is much easier to circumvent.