@nichu42 said in DNS resolving problem:
I've tried to modify the forward-all.conf like this
forward-tls-upstream: yes
forward-addr: 91.239.100.100@853#anycast.uncensoreddns.org
forward-addr: 1.1.1.1@853#cloudflare-dns.com
but it didn't work (SERVFAIL).
Answer to myself (in case someone else ever needs this):
It is necessary to also add the following to the conf file:
server:
tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt
so the validity of the certificates can be verified.
After that, you can add TLS upstream servers as mentioned in my previous post. I've decided for anycast.uncensoreddns.org and dns.quad9.net now.