[Dnsmasq-discuss] returns REFUSED when first response comes from non-recursive server

[Chris Novakovic]

On 27/02/17 10:04, Daniel Pocock wrote:
> 
> I've observed the following problem:
> 
> - dnsmasq is sending queries to 5 servers, one of them is not recursive
> and only answers for a private domain
> 
> - if the first response dnsmasq receives comes from the non-recursive
> server (REFUSED), then dnsmasq is sending a REFUSED response to the client
> 
> - dnsmasq subsequently receives a response from one of the recursive servers

This is expected behaviour. One possibility is to configure dnsmasq to
forward requests to the non-recursive server only for the private
domain, e.g.:

--server=/private.domain/non.recursive.server.ip

and a matching --rev-server directive if appropriate.