read this document about blocking (o)DoH, daily generated IPv4 and IPv6 lists on GitHub, RPZ file also available for use with unbound (how to), knot-resolver, bind, ...