Thanks for checking! For some domains, 'A' record works fine but AAAA record
crashes. May be it has do with some ipv6 issue in my router.
Is there a way to enable a backup resolver only for failed queries? I can see
policy.FORWARD and policy.TLS_FORWARD functions. But I think they forward all
queries, not just the failed ones.
Also is there a way to get all the direct dns queries (excluding name server
ones) without turning on full verbose logging?
Thanks,
Bala
On Thursday, October 15, 2020 3:06:02 AM EDT Vladimír Čunát wrote:
  On 10/14/20 8:48 PM, Balakrishnan Balasubramanian
wrote:
  Thanks! Got verbose logging. But not sure what is
the issue. Attaching
 logs. 
 I'm not sure either.  It looks like kresd is doing nothing wrong.  The
 two servers in **.ns.els-gms.att.net. don't appear to reply over UDP at
 all and send garbage over TCP.  When I query the same IP addresses from
 here they reply OK(-ish) and apparently also from other places (like
 from other public resolvers or 
dnsviz.net).
 It's possible that something in your network is interfering with the
 queries.  Overall I suspect the cause will be hard to track down.
 --Vladimir