An inbound only DNS forwarding rule would be pointless. All DNS queries should be originating from within the network.

EDIT

I think I see what you’re getting at. Assuming that the firewall is running on the NAS vs on the router.

The OP doesn’t specify, but I would assume the firewall rule would be on the router, as that makes the most sense to force all DNS requests on the network to go through the pihole.

I agree.

So the solution, OP, is to set the DNS settings on your NAS to your router’s internal IP so the firewall can redirect the traffic to your new port.

Windows is way more documented. Not necessarily by Microsoft but by the absolute waste community.

If I had a nickle for every BSOD error code I researched only to find “have you tried running sfc /scannow? What about a refresh? You tried both and nothing worked? Just reinstall!”

More documented my ass. Linux at least tells me what’s wrong. “No space left on device” or “missing dependency” is way better than “Error code 0x0000007e”