[Hello, I use PiHole since few days with the webinterface and I have noticied that I got a lot of client that are not in my local network, after reflexion it's appear that my router forward all port to my pihole, this devise is also running some others services and i need them to be accessible on WAN, but i would like to block DNS request from people outside of my local network directly on my raspberry because i can't perform it on my router ,he's only doing DMZ ]
My routeur is provived by my ISP , i can only activate a full port redirection to à single machine that is why I probably need to configuré à firewall or change config
Pi-hole isn't designed for public access, and indeed there is no need to open Pi-hole for public access at all.
It may be prudent to run a dedicated machine with just those services that you need to be publically availabe, and move your Pi-hole to a different machine that isn't accessible from the Internet.