Oh, dont forget to hide the DNS as well. IP is no longer the only way to track so use a Quad9 upstream DNS.