Why you do not use Disabled? and in this way you are using Stubby DoT DNS servers and it allows you to use Diversion script.The issue with my hacks is OpenVPN clients that use Accept DNS Configuration = Exclusive will not be able to connect since the /tmp/resolv.dnsmasq
- Accept DNS Configuration: Disabled