I finally figured out how to virtualize my OPNsense firewall. Suck it, Roku. Blocked that hard-coded google dns garbage.