{% extends 'base.html' %} {% block title %}DNS{% endblock %} {% block content %}
{% trans %}
Router Turris uses its own DNS resolver with DNSSEC support. It is capable of working independently or it
can forward your DNS queries your internet service provider's DNS resolver.
The following setting determines the behavior of the DNS resolver. Usually, it is better to use the ISP's
resolver in networks where it works properly. If it does not work for some reason, it is necessary to use
direct resolving without forwarding.
In rare cases ISP's have improperly configured network which interferes with DNSSEC validation. If you
experience problems with DNS, you can temporarily disable DNSSEC validation to determine the source
of the problem. However, keep in mind that without DNSSEC validation, you are vulnerable to DNS spoofing
attacks! Therefore we recommend keeping DNSSEC turned on and resolving the situation with your ISP as
this is a serious flaw on their side.
{% endtrans %}