Need some ideas on Android filtering

Related to

I don’t know / other

What is the issue you’re encountering

See details

What are the steps to reproduce the issue?

I am using an MDM solution to enforce Private DNS settings on my Android devices to my Cloudflare DNS servers. This provides system wide filtering of all apps, browsers etc and for the most part works well. However occasionally I need to allow a particular app access to a URL that is normally blocked, while still leaving all other filtering in place for the app.

On Samsung and Motorola devices this is easily accomplished by doing the following:

  1. Adding the URL on the Cloudflare DNS Server to the Allow List
  2. Blocking the URL system wide on the device using Knox Domain policies on Samsung devices and Thinkshield on Motorola devices.
  3. Overriding the system wide block of the URL for the apps that need access.

I am in need to doing something similar on devices without Knox or Thinkshield, such as Pixel devices.

Does anyone have suggestions on how to achieve this?

(I have tried deploying WARP instead of using Private DNS but it appears the only option for an app needing access to an otherwise blocked URL is to bypass the DNS policies entirely for that app. That is not really an option for me)