I am having a problem that I do not understand. I am running dnsmasq 2.80 and cannot resolve boinc.berkeley.edu even though my upstream DNS servers (8.8.8.8 and 8.8.4.4) resolve it fine. Here is what I get in the logs (I have replaced my IP address with my_ip):
dnsmasq[5635]: query[A] boinc.berkeley.edu from my_ip dnsmasq[5635]: forwarded boinc.berkeley.edu to 8.8.4.4 dnsmasq[5635]: dnssec-query[DS] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DS keytag 3456, algo 10, digest 2 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5635]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5635]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5635]: query[A] boinc.berkeley.edu from my_ip dnsmasq[5635]: reply boinc.berkeley.edu is 208.68.240.115 dnsmasq[5644]: query[A] boinc.berkeley.edu from my_ip dnsmasq[5644]: forwarded boinc.berkeley.edu to 8.8.4.4 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 57107, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 51617, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 6233, algo 10 dnsmasq[5644]: reply berkeley.edu is DNSKEY keytag 3456, algo 10 dnsmasq[5644]: dnssec-query[DNSKEY] berkeley.edu to 8.8.4.4 dnsmasq[5644]: validation boinc.berkeley.edu is ABANDONED dnsmasq[5644]: reply boinc.berkeley.edu is 208.68.240.115 This is what I get from dig (I have replaced the dnsmasq server IP address with dnsmasq_ip): dig @dnsmasq_ip boinc.berkeley.edu ;; Truncated, retrying in TCP mode. ; <<>> DiG 9.10.3-P4-Debian <<>> @dnsmasq_ip boinc.berkeley.edu ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 34036 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;boinc.berkeley.edu. IN A ;; Query time: 866 msec ;; SERVER: dnsmasq_ip#53(dnsmasq_ip) ;; WHEN: Thu Aug 01 14:12:32 MDT 2019 ;; MSG SIZE rcvd: 47 dig +ignore works fine: dig +ignore @dnsmasq_ip boinc.berkeley.edu ; <<>> DiG 9.10.3-P4-Debian <<>> +ignore @dnsmasq_ip boinc.berkeley.edu ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41693 ;; flags: qr tc rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;boinc.berkeley.edu. IN A ;; ANSWER SECTION: boinc.berkeley.edu. 299 IN A 208.68.240.115 ;; Query time: 321 msec ;; SERVER: dnsmasq_ip#53(dnsmasq_ip) ;; WHEN: Thu Aug 01 14:49:59 MDT 2019 ;; MSG SIZE rcvd: 63 Also (this may be unrelated, but I stumbled across it while troubleshooting and I don't understand it), when I do a dig +trace from my machine, it fails to resolve the authoritative servers: dig +trace @8.8.8.8 boinc.berkeley.edu ; <<>> DiG 9.10.3-P4-Debian <<>> +trace @8.8.8.8 boinc.berkeley.edu ; (1 server found) ;; global options: +cmd . 225285 IN NS a.root-servers.net. . 225285 IN NS b.root-servers.net. . 225285 IN NS c.root-servers.net. . 225285 IN NS d.root-servers.net. . 225285 IN NS e.root-servers.net. . 225285 IN NS f.root-servers.net. . 225285 IN NS g.root-servers.net. . 225285 IN NS h.root-servers.net. . 225285 IN NS i.root-servers.net. . 225285 IN NS j.root-servers.net. . 225285 IN NS k.root-servers.net. . 225285 IN NS l.root-servers.net. . 225285 IN NS m.root-servers.net. . 225285 IN RRSIG NS 8 0 518400 20190814050000 20190801040000 59944 . YLucSYJTUePAv0hTIdgkoXRIm5clxYoEyFx/67rAt/C+KKf5lIOwnAP4 S3VnZd0nO9sGRDT3mxNcTzHVHriFdaLiFBSHspDhspdKoU0SKgmkJlYw aeR8FyM8acyfWzqghSA3rydxFlQDu1kaekoBRVV0ppcV92jBlQFePRzH gNGAeLsIX8zoNPkIsx/6/doymTa2yMyQkh/iO0GxIVTw7bsJpH+2g4Iv e5pbs7Pls5wpziXg5l9aGbhtjVF2ruUp7LkMpXa5fDpEn/WfuKPhvlIm uWw++Bwsqc6QzAdBP9tafiwBu/t0LI65sxblaoy5oyF7IkL9VRLsAtOM v/BS2w== ;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 43 ms edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 86400 IN DS 28065 8 2 4172496CDE85534E51129040355BD04B1FCFEBAE996DFDDE652006F6 F8B2CE76 edu. 86400 IN RRSIG DS 8 1 86400 20190814170000 20190801160000 59944 . RjDmXvL5LW+9H/Qo1Ligk9rbHg718sZlAw3dzTvav8GeOtfNQ8Y45gJI DFmpET1QKdzI9zo8DOeSQxY5rYqFoei/CKmyJXYzsTRomwvqVT7SlVEB N7RU3mWPCCM7p3XGPZ+4r9OmO9u9pnKozyj9/NPSEcWZmmJzX2U9X8R3 iujfwqUCckvyZi1p/v4o8efz+FkcTSLeJAmcXflK62nn3LLgbD4UUjhf dXzIfxMTvPL6JRFGp2A6JX5r0FXduFaknaKeWILdcs0f9098QdS6cmuq CN+mKOD6o9H2y+aPyJlyl0DPmW78ZeE0FhdFHwUw3fx/x2eTde1OcsRp /XKvQg== ;; Received 1177 bytes from 202.12.27.33#53(m.root-servers.net) in 54 ms berkeley.edu. 172800 IN NS adns1.berkeley.edu. berkeley.edu. 172800 IN NS adns2.berkeley.edu. berkeley.edu. 172800 IN NS adns3.berkeley.edu. berkeley.edu. 86400 IN DS 3456 10 2 C7677FE8AC453BDFC04432C834B2D6B9526223F28A7A36E52277FF3E FEEBDDEB berkeley.edu. 86400 IN RRSIG DS 8 2 86400 20190806055859 20190730044859 44132 edu. Mt98SpbG5pErQnd7VfsrHL41KdYJPYm4/frEqTT54yYpyjZEs7lJF4WK zFOtmIf5pcZLS+p5ycqi0EnpLGDVppwFaXrxk8nsc2Ioi+l76Ik13YD7 v9EFmm2UrQd3Cl8DbroKc4aSb18aArOdGrdxSztuljLeYfD6S5YrMIky p/qYALXORQD43tl9owq6I1aUNGgoF7+QFEsl18n3hZFhRw== couldn't get address for 'adns1.berkeley.edu': not found couldn't get address for 'adns2.berkeley.edu': not found couldn't get address for 'adns3.berkeley.edu': not found dig: couldn't get address for 'adns1.berkeley.edu': no more But if I try to resolve them directly, it's fine: dig @8.8.8.8 adns1.berkeley.edu ; <<>> DiG 9.10.3-P4-Debian <<>> @8.8.8.8 adns1.berkeley.edu ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23216 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 512 ;; QUESTION SECTION: ;adns1.berkeley.edu. IN A ;; ANSWER SECTION: adns1.berkeley.edu. 3659 IN A 128.32.136.3 ;; Query time: 90 msec ;; SERVER: 8.8.8.8#53(8.8.8.8) ;; WHEN: Thu Aug 01 14:41:09 MDT 2019 ;; MSG SIZE rcvd: 63 Furthermore, if I perform the same trace command from the dnsmasq server, it works fine: dig +trace @8.8.8.8 boinc.berkeley.edu ; <<>> DiG 9.14.3 <<>> +trace @8.8.8.8 boinc.berkeley.edu ; (1 server found) ;; global options: +cmd . 15621 IN NS d.root-servers.net. . 15621 IN NS m.root-servers.net. . 15621 IN NS i.root-servers.net. . 15621 IN NS c.root-servers.net. . 15621 IN NS b.root-servers.net. . 15621 IN NS f.root-servers.net. . 15621 IN NS j.root-servers.net. . 15621 IN NS g.root-servers.net. . 15621 IN NS k.root-servers.net. . 15621 IN NS h.root-servers.net. . 15621 IN NS e.root-servers.net. . 15621 IN NS l.root-servers.net. . 15621 IN NS a.root-servers.net. . 15621 IN RRSIG NS 8 0 518400 20190811170000 20190729160000 59944 . EoLwrjgUfYoS3Do6vwwjLQtxq4+whuMDwRBNDiMeSRuECB4DnploeBjF nU0Et7Tj3JgEOtl3jSIhkYCSgpMRAg3/aH3Pfu4j4cjNW5Q91fZx7noa 1VpdyuxUoqKqGh2Ag2xUhHyq9F38MvOigh/1GI+b/IrSjA1FkNK7LyS9 DFyWAYyiUVTK9DLuXMWxscm8IcO1gcfFjG1xWbB+SuD+fnUIgafcjC2d BwK8WIqf9xmleG+ivzsqlKn5f8Ffc7n4SXTXbzXF96qjwCA73mq/FWoh HNEK69hZg40sUFfKNymR/NN9KzSiErQswkkLW6SfTUN7w/L+ou4Hr5Qj H3G05Q== ;; Received 525 bytes from 8.8.8.8#53(8.8.8.8) in 41 ms edu. 172800 IN NS g.edu-servers.net. edu. 172800 IN NS f.edu-servers.net. edu. 172800 IN NS l.edu-servers.net. edu. 172800 IN NS c.edu-servers.net. edu. 172800 IN NS i.edu-servers.net. edu. 172800 IN NS b.edu-servers.net. edu. 172800 IN NS m.edu-servers.net. edu. 172800 IN NS d.edu-servers.net. edu. 172800 IN NS k.edu-servers.net. edu. 172800 IN NS j.edu-servers.net. edu. 172800 IN NS h.edu-servers.net. edu. 172800 IN NS e.edu-servers.net. edu. 172800 IN NS a.edu-servers.net. edu. 86400 IN DS 28065 8 2 4172496CDE85534E51129040355BD04B1FCFEBAE996DFDDE652006F6 F8B2CE76 edu. 86400 IN RRSIG DS 8 1 86400 20190814170000 20190801160000 59944 . RjDmXvL5LW+9H/Qo1Ligk9rbHg718sZlAw3dzTvav8GeOtfNQ8Y45gJI DFmpET1QKdzI9zo8DOeSQxY5rYqFoei/CKmyJXYzsTRomwvqVT7SlVEB N7RU3mWPCCM7p3XGPZ+4r9OmO9u9pnKozyj9/NPSEcWZmmJzX2U9X8R3 iujfwqUCckvyZi1p/v4o8efz+FkcTSLeJAmcXflK62nn3LLgbD4UUjhf dXzIfxMTvPL6JRFGp2A6JX5r0FXduFaknaKeWILdcs0f9098QdS6cmuq CN+mKOD6o9H2y+aPyJlyl0DPmW78ZeE0FhdFHwUw3fx/x2eTde1OcsRp /XKvQg== ;; Received 1205 bytes from 192.33.4.12#53(c.root-servers.net) in 50 ms berkeley.edu. 172800 IN NS adns1.berkeley.edu. berkeley.edu. 172800 IN NS adns2.berkeley.edu. berkeley.edu. 172800 IN NS adns3.berkeley.edu. berkeley.edu. 86400 IN DS 3456 10 2 C7677FE8AC453BDFC04432C834B2D6B9526223F28A7A36E52277FF3E FEEBDDEB berkeley.edu. 86400 IN RRSIG DS 8 2 86400 20190806055859 20190730044859 44132 edu. Mt98SpbG5pErQnd7VfsrHL41KdYJPYm4/frEqTT54yYpyjZEs7lJF4WK zFOtmIf5pcZLS+p5ycqi0EnpLGDVppwFaXrxk8nsc2Ioi+l76Ik13YD7 v9EFmm2UrQd3Cl8DbroKc4aSb18aArOdGrdxSztuljLeYfD6S5YrMIky p/qYALXORQD43tl9owq6I1aUNGgoF7+QFEsl18n3hZFhRw== ;; Received 426 bytes from 192.12.94.30#53(e.edu-servers.net) in 32 ms boinc.berkeley.edu. 300 IN A 208.68.240.115 boinc.berkeley.edu. 300 IN RRSIG A 10 3 300 20190805040440 20190801034131 51617 berkeley.edu. rF5bcjX/lIgPlZSusFVr7IONZx47ROshdV/mz3neyZNJeWLZZ2CL7cuf 9JLxBSSMhlUaw+mopHATfYYEJE5cx3kiRcUYzgEjzPhi5p4qCUVjSNnz I8xqs+VhlUmk/Az9eaeaGGpzC96MM/qvknxHL4UZfll7cYLynlLnrt0B QXE= ;; Received 235 bytes from 128.32.136.3#53(adns1.berkeley.edu) in 40 ms I do not have a thorough understanding of DNS, and I would be extremely grateful if someone could shed some light on this for me. -- Andrew Duty
_______________________________________________ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss