story
I built my own router with a raspberry pi. I installed pi-hole and use that as a dns resolver. I then use an iptables rule to NAT / forward all dns traffic on port 53 to the pi-hole resolver, similar to how ISPs often intercept dns requests. This prevents IOT devices from bypassing the dns server configured via my DHCP. Letting pi-hole block the requests helps prevent errors from dns request timeouts.
I'm just waiting for smart devices to start doing that instead, forcing me to set up full SSL filtering until they start doing encrypted SNI :/
The only complaint is from my wife who sometimes Googles stuff and clicks on the top result, which is often an ad and will end up blocked. She now has to scroll down a bit to the real results.
Upon discovering the ads I was gonna return mine for a comparable LG, until I learned LG also have ads—at least this way I can pretend I'm not being taken for a ride.
At the time I didn't have any external devices capable of 4K Netflix or YouTube; now I do I should factory reset the TV and set it up without network access,