dnsmasq can read &#x2F;etc&#x2F;hosts, but &#x2F;etc&#x2F;hosts format can&#x27;t do * blocking. So if you are using &#x2F;etc&#x2F;hosts (with dnsmasq) &#x27;--block-at-tld&#x27; wouldn&#x27;t work.<p>Moving &#x2F;etc&#x2F;hosts to &#x2F;etc&#x2F;hosts.default is much better than the &#x27;hosts example&#x27;. Updated it. Thanks. Still experimenting with &#x27;dnsmasq reload&#x27; but if it works as advertised that&#x27;s more general than restarting the service.