*SOLVED* DOH dns over https - blocking at router level

banIP support thread looks promising
install banip then the luci plugin