pi-hole

Install. Configure iptables as instructed, ignore FirewallD.

Install from su -, otherwise usermod is not in your path (can't create pi-hole user).

August 2019 choices: OpenDNS (about 40% faster than Google, but similar to UNO (193.150.34.1, 91.230.181.1)), IP4+IP6, show everything.