I want to block all traffic to and from my network to a particular domain. Apparently, this is not possible in Windows, with either a HOSTS file or using firewall rules: the HOSTS file requires every sub-domain to be listed separately, there is no wildcard feature to just cover all of them (why?); and the Windows firewall rules work by IP address, not domain name.
My home office router/firewall is consumer-grade and gives a feature that's supposed to block traffic for certain "keywords"... but it doesn't work at all for https connections because it can't "see" the entire address. Which I think is ridiculous, because it can see the domain name, which is what I want to block.
Anyway - I can't seem to get a straight answer from searching because there's so much noise around this question - if I take a step up in router quality, get a commercial one, will I start to see more useful network management features, like being able to block a domain and all its sub-domains? Can I also prevent machines on the network from taking an end-run around these rules by resolving IP addresses by other means?