> so now if your first name server ever fails to resolve, it will switch the second and not switch back (unless it also fails) Exactly as it should. > This ca

> so now if your first name server ever fails to resolve, it will switch the second and not switch back (unless it also fails) Exactly as it should. > This causes all sorts of issues with private DNS servers on lans, VPCs, and VPNs where you want a failover to a public DNS while resolving. This is broken; you should have per-interface defined DNS. For internal lans, vpns et cetera you can define which zones these DNS servers handle. For public resolvers (designated with handling the ~. zone), just having multiple entries provides the fallback you want.