How to clone DNS requests to external services?

Question

Domain Name System

You need to clone requests to several external filtering systems (your own DNS server on the local network, all clients work through it) in order to implement a similar scheme:

• [working] request to an external fast failover DNS, the response from which will be given to the client;
  
• [clone] request to an external service like dns.yandex.ru for subsequent analysis of the response (whether it is included in the blocked ones);
  
• [clone] request to an external service such as rejector.ru and similar ones for further analysis of the response (whether it is included in the blocked ones).
  

The question is not about choosing DNS filtering services or comparing their effectiveness, but about the technical and efficient implementation of the traffic cloning and response logging scheme.
Platform for solution - doesn't matter Win or *nix, network hardware. A similar problem arises in networks with different software.
The goal is [by analyzing logs] to identify calls to domains from the black list (botnets, viruses, etc.) of various services.
It is impossible to use one service (paid/free) to which working DNS traffic can be turned, because

• there are false locks;
  
• the base of one resource is less than the bases of several resources.
  

Answer 1

And what is all this for? Do you want to follow users? So set the proxy.
If there was a DNS request, this does not mean that someone went to the address. Just a request and only

Answer 2

Roskomnadzor re-login :) And if, in fact, what prevents the client in the local network from changing the DNS server to 8.8.8.8 and not bothering with yours. But let's say if you have "Orthodox" users who do not know how to change dns, your question boils down to the task of "how to raise and configure a DNS server" in order to have replication of external DNS servers and other features, it is pointless to consider this issue without context, at least The DNS server can be raised on linux and on windows and the toolkit will be different.

Answer 3

In my opinion, turn on any router, they all support DHCP, in fact, here you have a server that will give external DNS.

Answer 4

habrahabr.ru/post/178727 start reading from here about powerdns capabilities in terms of subqueries. Then add to taste.