1 /tool fetch url=https://cacerts.digicert.com/DigiCertGlobalRootCA.crt.

pem
2 /certificate import file-name=DigiCertGlobalRootCA.crt.pem
3 /ip dns set use-doh-server=https://cloudflare-dns.com/dns-query verify-doh-cert=yes
4
5
6
7
8 /tool fetch url=https://curl.se/ca/cacert.pem
9 /certificate import file-name=cacert.pem
10 /ip dns set servers=
11 /ip dns static add name=dns.nextdns.io address=45.90.28.0 type=A
12 /ip dns static add name=dns.nextdns.io address=45.90.30.0 type=A
13 /ip dns static add name=dns.nextdns.io address=2a07:a8c0:: type=AAAA
14 /ip dns static add name=dns.nextdns.io address=2a07:a8c1:: type=AAAA
15 /ip dns set use-doh-server=“https://dns.nextdns.io/fe4232” verify-doh-cert=yes
16
17
18
19 /ip firewall nat add chain=dstnat action=redirect protocol=tcp dst-port=53
20 /ip firewall nat add chain=dstnat action=redirect protocol=udp dst-port=53