How to set router's own static DNS A record when using multiple LAN interfaces?

[dadaniel]

Note that this has nothing to do with blocking communication between subnets, so this works if you e.g. have:

Thanks for the clarification, I completely missed the point that the router itself is still reachable from all subnets because of the input chain