dnsmasq can be used for wildcard domain aliases in OPNsense firewall, https://github.com/opnsense/core/issues/4145#issuecomment-12...
Can you elaborate on this? Why this is awesome and what it achieves?
1) blackholing every possible subdomain of business-i-dont-like.com, and 2) return a single IP address for any and all internal subdomains of a private domain - they all go to the same proxy then, and it's just one setting to set and forget.
(I may have completely misunderstood this feature though, and I would welcome correction)