How to make web authorization on a dns-server (remote, caching)?

Question

linux

There is a dns server, Ubuntu + bind, banal caching.
While the server is on the local network, (the gateway on the network is separate on the win-server)
It is necessary to make sure that the first time the user accesses the Internet (ideally, not all, but from a separate ip pool), at the beginning he gets to a web page with authorization, autoresizes , and then it could work normally.
I can assume a train of thought:
Bind can definitely redirect the request to another server (ip).
I can assume that it is possible to redirect all requests to one place. Let's redirect to a page on the same server (let's put Apache there and, if necessary, PHP, etc.).
The user is authorized there, something is registered somewhere and bind sends it to the right place.
Question: find it "something and somewhere". Is such a scheme possible?
Simply put, is it possible to do something like a captive portal on a dns server? (then there is an idea to set up several of our remote networks on it, which are without any servers).

Answer 1

I think you need a proxy server.
Bindu doesn't need to log in, let it do its thing.
Put sqiud, set up authorization in HELL in it.
On clients, you set up going to the Internet through a proxy (politicians / manually / forced redirection on the firewall), and there they will be waiting for authorization.

Answer 2

It is a bad idea. DNS queries are automatically cached and the user can (most likely) get stuck on your page.
Make a captive portal (that's what it was invented for) - Google to the rescue.