Router Turris uses its own DNS resolver with DNSSEC support. It is capable of working independently or it can forward your DNS queries your internet service provider's DNS resolver.

The following setting determines the behavior of the DNS resolver. Usually, it is better to use the ISP's resolver in networks where it works properly. If it does not work for some reason, it is necessary to use direct resolving without forwarding.

In rare cases ISP's have improperly configured network which interferes with DNSSEC validation. If you experience problems with DNS, you can temporarily disable DNSSEC validation to determine the source of the problem. However, keep in mind that without DNSSEC validation, you are vulnerable to DNS spoofing attacks! Therefore we recommend keeping DNSSEC turned on and resolving the situation with your ISP as this is a serious flaw on their side.

Hint: This will enable your DNS resolver to place DHCP client's names among the local DNS records.
Discard changes

Connection test

Here you can test your internet connection. This test is also useful when you need to check that your DNS resolving works as expected. Remember to click on the Save button if you changed your forwarder setting.

Unable to verify network connection.
Test type Status
DNS ???
Test connection