Thanks, that helps to clarify my understanding

Just one domain, I only have dnsmasq forwarding to tdns for recursive resolving, tdns forwards to quad and cloudflare for resolving what isn’t in my local cache. I’m not sure I am understanding your question.

Thanks for taking the time to comment.

My confusing was that <dns-server> used for the look up wasnt in my net nor upstream dns.

I turned off my vpn and it resolved as expected, so I suppose that 10.2.0.1 is the dns server for my vpn provider.

It is lost technology… only the powerful ancients could accomplish such.

Or those familiar with the dark arts.