Router Turris uses its own DNS resolver with DNSSEC support. It is capable of working independently or it can forward your DNS queries your internet service provider's DNS resolver.
The following setting determines the behavior of the DNS resolver. Usually, it is better to use the ISP's resolver in networks where it works properly. If it does not work for some reason, it is necessary to use direct resolving without forwarding.
In rare cases ISP's have improperly configured network which interferes with DNSSEC validation. If you experience problems with DNS, you can temporarily disable DNSSEC validation to determine the source of the problem. However, keep in mind that without DNSSEC validation, you are vulnerable to DNS spoofing attacks! Therefore we recommend keeping DNSSEC turned on and resolving the situation with your ISP as this is a serious flaw on their side.
Here you can test your internet connection. This test is also useful when you need to check that your DNS resolving works as expected. Remember to click on the Save button if you changed your forwarder setting.