Hi, The patch is split into two commits for ease of review (i) Refactor the code changing no functionality -- most of win_wfp_block_dns is moved to a new file and made independent of the rest of the code
(ii) Implement a handler for blocking dns in the interactive service With (i) and (ii) --block-outside-dns should work without admin privileges if the interactive service installed and running and GUI is started as user. Tested on Win7/Win10