How to route layer-7 traffic in linux?

Question

linux

There was a problem with DNS when using TOR, outside the Russian Federation.
It turned out that Tor's dns can't work with SRV records!
Because of this, protocols such as xmpp do not work.
The problem was temporarily solved by this design

iptables -t nat -A PREROUTING -i $_input_ -p udp --dport 53 -j DNAT --to 8.8.8.8:53

But unfortunately now all requests go through the specified address.
Question:
How (and is it possible at all) using the OpenDPI or l7-filter libraries to redirect to the required dns if --querytype=SRV ?

Answer 1

To avoid leakage of DNS requests, use https://dnscrypt.org/
Because in your version, non-encrypted traffic going to Google may well be intercepted and substituted by a malicious provider.