I blocked my devices from bypassing my DNS server with one firewall rule

Stopping them dead in their tracks.