Dnsmasq - a DNS forwarder for NAT firewalls.
Dnsmasq is a lightweight, easy to configure DNS forwarder and DHCP server. It is designed to provide DNS and, optionally, DHCP, to a small network.
I was going to use NSD or MaraDNS for this, but Dnsmasq seems like a better fit. We’ll see.