@ian_682 That is working fine. its when a device is hardcoded dns or user manually types their own dns. I don't want too just block that traffic but redirect it to the internal DNS.

I just got a TL-R605 and EAP245 to replace a Netgear router running Freshtomato. I have a pihole setup and in Freshtomato I was able to use iptables script to capture any dns traffic on 53 that was...