Hacker News Reader

If they use own DNS then maybe it can be disabled by IP rule in firewall?

If they can't get to their preferred DNS servers directly then they use DNS-over-HTTPS which you can't block.