I think the way to do this is Ipfire DNS - pihole - lan Block Ipfire DNS to all except pihole Lan Gets DNS from pihole.