A great place to start would be to install Unbound - a great resolving caching server from NLNet Labs: http://unbound.net/ http://unbound.net/ They also have

A great place to start would be to install Unbound - a great resolving caching server from NLNet Labs: http://unbound.net/ http://unbound.net/ They also have a version focused on providing DNSSEC validation called "DNSSEC-Trigger": http://www.nlnetlabs.nl/projects/dnssec-trigger/ http://www.nlnetlabs.nl/projects/dnssec-trigger/ Wikipedia also has a decent comparison of a wide range of different resolvers: https://en.wikipedia.org/wiki/Comparison_of_DNS_server_software https://en.wikipedia.org/wiki/Comparison_of_DNS_server_softw... The key is that in the "Feature matrix" table there you need to have a "Yes" in the "Recursive" column.