ASUS Router question about DNS and FW

[OnChainLife]

I have a few questions about setting DNS in asus routers GUI. Its an asus rog strix gs-ax-3000.
So there are a few places to set DNS'S in the GUI. I dont know which one the router will use. If anyone can clarify it would be great. I tried ASUS's tech support but they couldn't answer.
I would like to use DoT.
In the first SS, If I set the DNS in area 1, It only allows for IPv4.  In area 2 I can set both IPv4 & v6, and enable DoT. So should I clear out area 1 and leave it blank?
There is also an area in LAN/DHCP SERVER menu for both ipv4 & v6 DNS.
There is also an area in IPv6 menu for DNS, but to access the fields you need to disable "connect to dns automatically". If connect automatically is enabled, does this instruct the router to default to the input in the dns fields in its WAN menu?

To recap, I want to use DoT and assign v4 and v6 DNS'S, I just dont know which areas need to be set and which should be left blank, and if using " Connect Automatically " In the IPv6 menu is correct.

For the FW question, I want to disable some ports, but there is a "Source IP" field for entries. It indicates the clients IP should be entered. I want to disable the ports for all connections, and I have not set any static IP's for any devices.... So Im a little confused.

Thanks for any help!
 

[David H. Lipman]

A Router can Forward DNS Requests or pass DNS Server to leases via DHCP.

For example:

IP Address:   192.168.1.35
Gateway:       192.168.1.1
DNS:              192.168.1.1

In that case the Router acts as a DNS Proxy, but it also slows down DNS requests.

Instead, pushing fixed DNS Server IP addresses via DHCP allows the leased IP to make direct DNS Requests without the delay of the Router acting as a Proxy.

Additionally the Router itself can be assigned DNS servers for it to use.

DNSSEC and associated DNS Privacy settings are a personal choice

 

Edited September 12 by David H. Lipman
Edited for content, clarity, spelling and/or grammar