Whole house ad blocking with DNS