Disclaimer: Unofficial article, use at your own risk.

DNS queries and IP+port connections are monitored through OpenWRT dnsmasq and conntrack (NAT table).