# Log queries for visibility
log-queries
log-facility=/var/log/dnsmasq.log

# Do not read /etc/resolv.conf
no-resolv

# Upstream DNS servers (CoreDNS backends)
server=192.168.243.11
server=192.168.243.12
server=192.168.243.13
server=192.168.243.14

# Never forward plain names
domain-needed

# Never forward reverse lookups for private ranges
bogus-priv

# Listen on all interfaces
interface=eth0
bind-interfaces

# Set cache size (optional)
cache-size=1000


# Upstream selection behavior (uncomment one or both as needed)
# Query upstreams strictly in the listed order (no randomization)
#strict-order

# Query all upstream servers in parallel; use the first reply
#all-servers

# Disable cache entirely (for testing)
#cache-size=0