Reduced CoreDNS Corefile from http://git.io/corefile

Corefile

. {
  ads {
      strict-default-lists
      log
      auto-update-interval 24h
      list-store ads-cache
  }

  hosts {
      fallthrough
  }

  forward . 208.67.222.222:443 208.67.222.222:5353 208.67.220.220:443 208.67.220.220:5353 127.0.0.1:5301 127.0.0.1:5302 127.0.0.1:5303  {
      except taobao.com youku.com
  }

  proxy . 192.168.1.1

  bogus 101.226.10.8 198.105.254.11 104.239.213.7 61.191.206.4 218.30.64.194 61.139.8.101 61.139.8.102 61.139.8.103 61.139.8.104 42.123.125.237 202.100.68.117 113.12.83.4 113.12.83.5 202.100.220.54 60.191.124.236 60.191.124.252 222.221.5.204 124.232.132.94 202.102.110.204 61.131.208.210 61.131.208.211 202.102.110.203 202.102.110.205 219.146.13.36 180.168.41.175 180.153.103.224 111.175.221.58 61.183.1.186 125.76.239.244 125.76.239.245 222.221.5.252 222.221.5.253 220.165.8.172 220.165.8.174 112.132.230.179 202.106.199.34 202.106.199.35 202.106.199.36 202.106.199.37 202.106.199.38 221.192.153.41 221.192.153.42 221.192.153.43 221.192.153.44 221.192.153.45 221.192.153.46 221.192.153.49 125.211.213.130 125.211.213.131 125.211.213.132 125.211.213.133 125.211.213.134 218.28.144.36 218.28.144.37 218.28.144.38 218.28.144.39 218.28.144.40 218.28.144.41 218.28.144.42 202.98.24.121 202.98.24.122 202.98.24.123 202.98.24.124 202.98.24.125 60.19.29.21 60.19.29.22 60.19.29.23 60.19.29.24 60.19.29.25 60.19.29.26 60.19.29.27 220.250.64.18 220.250.64.19 220.250.64.20 220.250.64.21 220.250.64.22 220.250.64.23 220.250.64.24 220.250.64.25 220.250.64.26 220.250.64.27 220.250.64.28 220.250.64.29 220.250.64.30 220.250.64.225 220.250.64.226 220.250.64.227 220.250.64.228 202.99.254.231 202.99.254.232 202.99.254.230 123.129.254.11 123.129.254.12 123.129.254.13 123.129.254.14 123.129.254.15 123.129.254.16 123.129.254.17 123.129.254.18 123.129.254.19 221.204.244.36 221.204.244.37 221.204.244.38 221.204.244.39 221.204.244.40 221.204.244.41 218.68.250.117 218.68.250.118 218.68.250.119 218.68.250.120 218.68.250.121 120.209.138.64 211.139.136.73 221.179.46.190 221.179.46.194 183.207.232.253 223.82.248.117 211.138.74.132 211.137.130.101 211.136.113.1 211.138.102.198 120.192.83.163 183.221.242.172 183.221.250.11 111.11.208.2 183.224.40.24 211.98.70.226 211.98.70.227 211.98.71.195 114.112.163.232 114.112.163.254

  log
  cache
  redisc {
      endpoint 127.0.0.1:6379
  }
  health
  reload
}

.:5301 {
   forward . tls://9.9.9.9 tls://9.9.9.10 {
       tls_servername dns.quad9.net
   }
   cache
}

.:5302 {
    forward . tls://1.1.1.1 tls://1.0.0.1 {
        tls_servername cloudflare-dns.com
    }
    cache
}

.:5303 {
    forward . tls://8.8.8.8 tls://8.8.4.4 {
        tls_servername dns.google
    }
    cache
}

see:
https://gist.github.com/missdeer/5c7c82b5b67f8afb41cfd43d51b82c2d
https://minidump.info/blog/2019/07/coredns-no-dns-poisoning/
https://minidump.info/blog/2019/12/enhanced-coredns/