Side note about OpenDNS - your consumer router probably doesn’t filter DNS requests, which means that your mildly tech-savvy kids/guests can manually enter their own DNS server in their TCP/IP settings, and not use the OpenDNS server that is assigned to them via DHCP (but still use the assigned IP address).