I use pihole / pfsense (Firewall with a dns resolver inside of it with a filter while forwarding the dns to the pi hole upstream and then doing more filtering as well. From the dns traffic itself.)
Pfsense (Firewall, not wifi router - comes after the wifi) filter is called “pfBlockerNG”
