I'm using RethinkDNS as a combined firewall and wireguard VPN. I added these two block rules:

127.0.0.0/8

::1/128

I'll update here with any issues.