Alright. ‘pi hole’ is something i tried. and ‘adguard home’. But this doesn’t really fulfill the requirements if you want something for your android phone.

i think installing adguard-home dns, a firewall and vpn endpoint on a v-server and then connecting with your phone to the vpn would solve all issues. including firewall and dns at the same time (because then it runs on your server). but you’d invent and maintain a whole privacy service yourself.

if you don’t want all of that, you’re probably better off using an existing service or app.