goofydumbo412··on One IP address, many users: detecting CGNAT to reduce collateral damageDNS blocking works better than IP address based blocking because you can block domains and hosts instead of IP addresses. And it still blocks the domain/host even if its IP address changes.