Intercept all DNS queries?

We are working with a school that uses DNS-based web filtering. I know that crafty high school students are going to figure this out and simply change the DNS server on their devices to bypass the web filter. Is there a way for the router to intercept all DNS requests and send them to the specified DNS servers?

Yes, make a NAT rule. But crafty students will use DoH and you’re out of luck.

I see