I block all dns outbound on my home network. My resolver uses DNS over https to Cloudflare. I consider any DNS / udp 53 traffic outbound unauthorized or a leak

I block all dns outbound on my home network. My resolver uses DNS over https to Cloudflare. I consider any DNS / udp 53 traffic outbound unauthorized or a leak that should be prevented. If I see a beacon to a particular DNS server externally, I’ll create a NAT to point to my resolver so I can manipulate the answers, if I deem it necessary.