or replace obsolete unsupported systems

Company expects you to replace perflectly working appliance because they can’t be bothered with supporting it after an arbitrary amount of time. So typical

These politicians know full well what they’re doing. At least they should and there’s no excuse. But they know.

I just do it all in my openwrt router now. Set up any DoH (https-dns-proxy) or DoT (stubby) with DNSSEC, plus blocklists with adblock-fast.

Hagezi has some servers with default blocking https://github.com/hagezi/dns-servers

https://github.com/hagezi/dns-blocklists#dnsservices

I was liking NextDNS, they have good features, and I liked not having to maintain blocklist files with shady domains in plain text saved in my hardware, but their jurisdiction and their code being closed source made me reevaluate.