@jason I can see the queries in my PiHole’s logs, so iOS is clearly making the query, getting blocked, and then resolving it some other way when this setting is enabled. I just have the default resolver for cellular, unsure how I’d control that other than by using a VPN, so that’s probably how it’s getting around the queries I block on WAN.