1) With DoT enabled, does this filter to the connected clients? Or is DNSFilter needed with "Router" setting on? If it's not, is it only for users who want clients to use a different DNS service/server vs another?
Chain of event:
Normal:
Client => dnsmasq => WAN DNS
DNSFilter:
Client => DNSFilter DNS (enforced)
With DOT:
Client => dnsmasq => Stubby => DoT servers
With DOT + DNSFilter:
Client => DNSFilter DNS (DOT is bypassed)
With DOT + DNSFilter set to "Router":
Client => dnsmasq => Stubby => DOT servers (enforced)
Basically, think of DOT as a replacement for the WAN DNS once Stubby is in a running stage (after the clock is set). Everything else works just as before, except DOT is used instead of the DNS configured on the WAN interface (be it automatically obtained from the ISP, or manually entered on that page).
Last edited: