Android Private DNS resolving local hostname

Hello!

I have the private DNS setting in android configured to the hostname, but when that is enabled any local hostname is also being resolved by NextDNS even though it is in the Allowlist, CNAME flattening is disabled, and DNSSEC is disabled on PfSense.

Any time I try pinging anything ending in `.daily` (local domain name set in PfSense) it does not resolve. If I disable NextDNS it works just fine.

Private DNS enabled:

; <<>> DiG 9.16.27 <<>> @10.24.0.1 dns.nextdns.io
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52439
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;dns.nextdns.io.                        IN      A
;; ANSWER SECTION:
dns.nextdns.io.         300     IN      CNAME   steering.nextdns.io.
steering.nextdns.io.    13      IN      A       185.240.84.237
steering.nextdns.io.    13      IN      A       170.39.225.135
;; Query time: 143 msec
;; SERVER: 10.24.0.1#53(10.24.0.1)
;; WHEN: Fri Apr 15 11:35:48 CDT 2022
;; MSG SIZE  rcvd: 98

Disabled:

; <<>> DiG 9.16.27 <<>> @10.24.0.1 dns.nextdns.io
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 457
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;dns.nextdns.io.                        IN      A
;; ANSWER SECTION:
dns.nextdns.io.         171     IN      CNAME   steering.nextdns.io.
steering.nextdns.io.    191     IN      A       185.240.84.237
steering.nextdns.io.    191     IN      A       170.39.225.135
;; Query time: 0 msec
;; SERVER: 10.24.0.1#53(10.24.0.1)
;; WHEN: Fri Apr 15 11:37:57 CDT 2022
;; MSG SIZE  rcvd: 98

As you can see by the query time, when it is going to PfSense the query time is 0ms.

What can I do to fix this other than Tasker?