Hmm, could be. In addition to redirecting all port 53 to the router, I have manual rules to completely block 853 and a homemade solution to block specific IPs (both v4 and v6) on port 443. The latter uses various sources, but more sane people would just use banip and its DoH list (banIP support thread).