DNS server ad blocking. I use technitium DNS server for devices on my network. Set up a virtual machine with that or another ad block DNS server like pihole on it, and then point your clients to it. This way it looks up where to find ‘adserver.com’ (for example) and gets a response of ‘NOWHERE’. Can’t go to the ad store to show you ads.