<a href="https:&#x2F;&#x2F;github.com&#x2F;jakeogh&#x2F;dnsgate" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;jakeogh&#x2F;dnsgate</a> has a whitelist command for this situation. It&#x27;s really necessary if you use the block-at-psl[1] config option.<p>[1] strips domains to the top level that the public can register using <a href="https:&#x2F;&#x2F;publicsuffix.org&#x2F;" rel="nofollow">https:&#x2F;&#x2F;publicsuffix.org&#x2F;</a><p>It also can quickly &quot;dnsgate disable&#x2F;enable&quot;. (dnsmasq only, quick enable&#x2F;disable for &#x2F;etc&#x2F;hosts is not supported yet, patches appreciated)