{% extends 'base.html' %} {% block title %}DNS{% endblock %} {% block content %}

DNS

{% trans %} Router Turris uses its own DNS resolver with DNSSEC support. It is capable of working independently or it can forward your DNS queries your internet service provider's DNS resolver.

The following setting determines the behavior of the DNS resolver. Usually, it is better to use the ISP's resolver in networks where it works properly. If it does not work for some reason, it is necessary to use direct resolving without forwarding.

In rare cases ISP's have improperly configured network which interferes with DNSSEC validation. If you experience problems with DNS, you can temporarily disable DNSSEC validation to determine the source of the problem. However, keep in mind that without DNSSEC validation, you are vulnerable to DNS spoofing attacks! Therefore we recommend keeping DNSSEC turned on and resolving the situation with your ISP as this is a serious flaw on their side. {% endtrans %}

{% endblock %}