pihole is one way, though it's tricky to do it right