Doing tests for the DNS setting this evening, block inbound port 53 is the best addition to this setup. I love the community in Librem.one chat/Riot/Matrix! Thanks for the suggestions!