Force dns and mitigate isp hijacking

What exactly is off and what issue are you facing?

VPN is off and I want 1.1.1.1 as dns but isp is hijacking

This is probably a misunderstanding, your router is configured to intercept DNS and redirect it to DoH.
At this point, all your DNS traffic should be encrypted, which makes impossible for ISP to hijack it.

There's not much else can be done on the router, and the rest depends on the client OS and browser.
If you use a Chrome-based mobile browser, try disabling its Lite mode and Encrypted DNS features.

3 Likes