According to https://www.pcwrt.com/2020/01/how-to-allow-or-block-web-sites-on-the-router/ I should be able to whitelist domains that are normally blocked by the Ad setting or DNS:
If you choose “Black List“, the domains or URLs listed in the “Blocked URLs” box will be blocked. Everything else is allowed. And in general, yo don’t need to list the domains or URLs you want to allow in the “Allowed URLs” box.
Unless the domain is blocked by the DNS service you choose (for example, OpenDNS). Then there’s no need to enter the domain into the “Blocked URLs” box if you want to block it. But if you want to allow a domain blocked by DNS, you do need to enter it in the “Allowed URLs” box to override the DNS block.
However, that is not my experience. Within the Apps->Access Control settings page I have a profile named “Work” with 2 computers assigned to it. It has the following settings:
DNS Server: Google Public DNS (8.8.8.8, 8.8.4.4)
Block Ads -> Y
Safe search, Enforce Access Control, Block proxy, Block literal IP addresses, Block VPN, TOR -> N
URL Filter Mode: Black List
YouTube Restricted Mode: Off
Black List: <blank>
White List: includes g.live.com, wpad.mentorg.com, and more
But when I go to the logs, I see wpad.mentorg.com blocked with reason DNS and g.live.com blocked with reason Ad.
Is there something I’m missing for the White List to take effect?