I’m looking to setup a way to force all unencrypted DNS traffic from a given VLAN to be routed to MIkrotik’s local DNS server, then from there, I’d like to route that traffic to a different External DNS server than the one ROS uses.
Currently I’m able to redirect all client DNS traffic to the router’s DNS with a simple dstnat rule and action=redirect, but my question is, what’s the best way to forward that traffic from there to an external DNS server that’s different than that which ROS is using?
I’m also able to redirect the client DNS traffic directly to an External DNS resolver of my choice without passing through Mikrotik’s DNS server, but the reason we’re passing the traffic by ROS is for domain logging purposes.