Dual WAN/LAN configuration question

[ancjr]

Needing help achieving a specific DNS configuration.

I'll attempt to diagram my intention:

LAN1 DNS client requests -> pfsense/pfblocker -> DNS requests forwarded on VPNWAN1 to external (non TLS) DNS on port 53

LAN2 DNS client requests -> pfsense/pfblocker -> DNS requests forwarded on ISPWAN2 via SSL/TLS to rootservers

Regular TCP/UDP traffic is properly routed and forwarded. I have no trouble getting non SSL/TLS resolution outgoing on both WAN interfaces, however DNS requests leak across the WANs.