Simon Kelley wrote: > That's not quite what happens: Ok, in that case I think the confusing queries were not generated by dnsmasq but by "dig" on another client, with the dnsmasq box doing NAT on them... I will investigate. Thanks! Marcus