if you want to do a network wide I would use a pi hole and or use open wrt or snort have multi layers of security more layers more secure