If you think allowing unrestricted DNS is moronic, you haven't seen anything ;) One of our major ISPs has paid wifi networks in many cities here in Portugal, but they allow connections to any server on port 443 (HTTPS). You don't even need a server, there are free VPNs that use that port to ensure compatibility with more restricted networks.