# Support dropping ESNI records for blocked domains

**URL:** <https://discourse.pi-hole.net/t/support-dropping-esni-records-for-blocked-domains/13250>\
**Category:** Implemented\
**Created:** [September 28, 2018, 4:59pm UTC](https://discourse.pi-hole.net/t/support-dropping-esni-records-for-blocked-domains/13250 "2018-09-28T16:59:51Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![jpgpi250](https://discourse-cdn.pi-hole.net/user_avatar/discourse.pi-hole.net/jpgpi250/32/286_2.png) [@jpgpi250](https://discourse.pi-hole.net/u/jpgpi250)\
**Post date:** [April 20, 2020, 5:33pm UTC](https://discourse.pi-hole.net/t/support-dropping-esni-records-for-blocked-domains/13250/6 "2020-04-20T17:33:01Z")

</div>

> [@alexhaydock](#):
>
> - When ESNI is enabled in the browser, the browser makes TXT queries through Pi-Hole in the format: `_esni.blocked.domain`
> - Pi-Hole does not filter these queries, even for blocked domains, which can end up allowing the browser to access ESNI-enabled domains which should be blocked.

pihole v5 blockes also TXT records, so blacklisting `blocked.domain` should suffice.

> [@Problem with regex?](https://discourse.pi-hole.net/t/problem-with-regex/26747/4):
>
> The current development version already blocks all types of requests so you won't need to do anything in addition. FTL v4.x blocks only A and AAAA as mentioned by @jfb.

If your firewall allows it, you could use the daily updated (updates if changed) [IPv4](https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOHipv4.txt) and [IPv6](https://raw.githubusercontent.com/jpgpi250/piholemanual/master/DOHipv6.txt) lists to block port 443 for specific (DOH) IP' addresses.  
[https://discourse.pi-hole.net/t/doh-dns-over-https-ip-block-list-s/30393](https://discourse.pi-hole.net/t/doh-dns-over-https-ip-block-list-s/30393)

---

_[View the full topic](https://discourse.pi-hole.net/t/support-dropping-esni-records-for-blocked-domains/13250)._