How to hide public external DNS?

[quarreldazzle]

When using most commercial VPNs, any DNS leak test tells me that DNS requests come from the same IP of the request itself.

With Streisand, even if the DNS requests go through the VPN (with 10.8.x.x) the public DNS servers (by default, Google DNS) are shown in DNS leak tests.

I installed dnscrypt-proxy and configured dnsmasq to use it, so that dnsmasq uses the DNS server running at 127.0.0.1 with a custom port (dnscrypt-proxy). dnscrypt-proxy itself uses Cloudflare's DNS. DNS leak tests still see Cloudflare as DNS.

How can I make it such that leak tests see my VPN IP as DNS server?