I finally figured out how to virtualize my OPNsense firewall. Suck it, Roku.

Blocked that hard-coded google dns garbage.