> #keep network on pi-hole iptables -t nat -I PREROUTING -i br0 -p tcp --dport 53 -j DNAT --to 192.168.1.pi:53 iptables -t nat -I PREROUTING -i br0 -p udp --dport 53 -j DNAT --to 192.168.1.pi:53 #punch DNS hole for pi-hole iptables -t nat -I PREROUTING -i br0 -p tcp -s 192.168.1.pi --dport 53 -j ACCEPT iptables -t nat -I PREROUTING -i br0 -p udp -s 192.168.1.pi --dport 53 -j ACCEPT