Как отключить dns over https?⁠⁠

Ладно.Этот список в браузеры встроен что ли? Вот прям так захардкожен?

Приведу весь текст решения из ссылки

There's not much info out there on how exactly to do this, so here's what I did. These rules will only work if you have a Mikrotik router or switch.

Step 1: Set up DNS.

Go to IP > DNS and enable the service and enable remote connections. Enter the address of the PiHole.

Step 2: Address lists.

Go to IP > Firewall > Address Lists and make a new one with the PiHole's IP and name it PiHole.

Step 3: Redirect DNS to PiHole. My PiHole is 192.168.1.59, but yours will be different.

Go to IP > Firewall > NAT > New Rule. Add the following info:

Chain: dstnat

Protocol: 17 (udp)

Dst. Port: 53

In. Interface List: LAN [your router likely has this list already]

Src. Address List: !PiHole [a custom address list with the PiHole]

Action: dst-nat

To Addresses: 192.168.1.254 [that's my router's IP, it has its resolver that uses the PiHole]

To Ports: 53

Step 4: Block DoH.

This one is harder, so I'll drop a link here: https://github.com/bambenek/block-doh/blob/master/doh-hosts....

Go to IP > Firewall > New Rule. Add this info:

Chain: Forward

Protocol: 6 (tcp)

Any. Port: 443

Src. Address List: !PiHole

Dst. Address List: DoH Servers

Action: drop

To make the DoH Servers list, go into the terminal and put this command in:

ip firewall address-list

then copy and paste this:

add list="DoH Servers" address=the-server-URL

and fill in the blank for each entry in the link. You're done!

Прошу пояснительную бригаду. Что делает правило из 4 пункта?

Как я понимаю. Дропаются все пакеты на порту 443, протокол TCP, источник НЕ из списка разрешенных (PiHole), назначение - список левых DNS. Но тут вопрос. Причем здесь 443 порт? Разве DNS-ответ не идет так же через HTTPS?