But i need another server to do so (another appliance) ?
Or i do not clearly understand how to do so with only my rpi with ncp on it and dnsmasq, and a fuc**** router
In any case im blocked
It would involve selecting and learning a DNS server (bind, dnsmasq, there are others), implementing it on the rpi along with the appropriate zone and records, then making it the primary/sole DNS server for your LAN.
It sounds like your router is causing you some problems. If you’re interested in replacing it, check out OPNsense. It can also do both the DNS server and the NAT reflection.
I was able to follow it (with some effort, trial-and-error, and lots of googling) to get the setup i wanted!
I suggest fixing the formatting around your logrotate snippet.
For future users who want other LAN devices to be able to connect, make sure you add a listen-address directive in dnsmasq.conf.mine. I mistakenly only added 127.0.0.1 because I thought ernolf used two entries for his two instances of dnsmasq (whereas I only have one).
If youre using ubuntu make sure you install the netmasq package from apt BEFORE starting… ubuntu 22.04 seems to preship some plugin version for NetworkManager that you don’t want to use.
My final question is about DoH … since dnsmasq is going to be forwarding a lot of requests to my chosen DNS server, is there any way to secure this communication a little bit with DoH?