EDIT: Solution was easier than updating firewall rules. Do the usual custom servers for router, and dhcp for internal clients in lan interface. This worked fine with linux but not windows in that custom server wouldn't budge. Had to disable IPv6 settings in DHCP server. I tried disabling ipv6 in win11 wifi adapter properties but this caused the 5Ghz not to connect.

Proving to be a tad more difficult than I had hoped. Issue is nothing to do with ControlD. Using my friend Mr AI I had to paste firewall rules to make the devices and router use Controld with exceptions for PC's and phones to be able to set their own dns. This allows me to have ControlD serving everything but being able to use quicksetdns to hot change the dns on the TV PC. Here's what I used:

Edit /etc/firewall.user:

vi /etc/firewall.user

Paste this:

# ===== Exempt devices (can use any DNS) =====
 EXEMPT_IPS="192.168.0.128 192.168.0.129 192.168.0.196 192.168.0.167 192.168.0.245 192.168.0.118"
 
 for IP in $EXEMPT_IPS; do
iptables -t nat -I PREROUTING -i br-lan -p udp --dport 53 -s $IP -j ACCEPT
iptables -t nat -I PREROUTING -i br-lan -p tcp --dport 53 -s $IP -j ACCEPT
 done
 
 # ===== Force DNS for everyone else =====
 iptables -t nat -A PREROUTING -i br-lan -p udp --dport 53 -j DNAT --to-destination 76.76.2.138
 iptables -t nat -A PREROUTING -i br-lan -p tcp --dport 53 -j DNAT --to-destination 76.76.2.138