I've only used OpenSnitch, a Linux equivalent of LS. Pihole operates at domain/subdomain level. So it won't resolve domains that are in your blacklist. *Snitc

I've only used OpenSnitch, a Linux equivalent of LS. Pihole operates at domain/subdomain level. So it won't resolve domains that are in your blacklist. *Snitch operates at packet level, so whilst you can block a domain, you can also block an app's access to a particular domain but allow another app access, maybe only by one user and to a specific port. Snitch takes much more setup and will annoy you until you've worked through all the usual traffic. It reminds me of the Proxomitron back in the day (https://en.wikipedia.org/wiki/Proxomitron https://en.wikipedia.org/wiki/Proxomitron).