This setup allows you to block domains locally on macOS using dnsmasq and enforce it system-wide with a DNS configuration profile.
- Fast local DNS resolution with
dnsmasq - Easily block thousands of domains
- System-wide DNS routing to
127.0.0.1using a.mobileconfigprofile - Survives reboots via
launchctl