Florian Obser wrote: > Not everything listening on localhost port 53 is a recursive resolver. > nsd(8) per defaults listens on 0.0.0.0 and will respond with REFUSED for > almost every query. asr stops in that case and does not try the next > resolver in the list.
Ah! There's the catch. The good news is I think we can still bind to localhost:53 if nsd is on *:53 (right?). This matters if rebound isn't listening.