You put your firewall in transparent bridge mode between the ISP's router and your network and then do whatever you want, e.g. like redirecting the DNS to where

You put your firewall in transparent bridge mode between the ISP's router and your network and then do whatever you want, e.g. like redirecting the DNS to where you want it, no matter what nameserver is being queried. It's not that complicated.