DNSMASQ-Full: DNS Lookup not working with DNSSEC on OpenWrt 23.05.5

[Cub0n]

Hello,

in OpenWrts Status -> Realtime Graphs -> Connections, the DNS Lookup ("Enable DNS Lookup") will not work if DNSSEC is enabled from dnsmasq-full.
By deactivating DNSSEC, the DNS Reverse Lookup is working again.

Devices behind OpenWrt (in the Private Network) the DNS Reverse Lookup is working.

/etc/config/dnsmasq:
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option localservice '1'
option filterwin2k '1'
option local '/local/'
option domain 'local'
option confdir '/tmp/dnsmasq.d'
option rebind_protection '0'
option nonegcache '1'
option noresolv '1'
option quietdhcp '1'
list interface 'lan'
option dnssec '1'
...

Greetings

[Cub0n]

It's a duplicate to openwrt/openwrt#17633

[Cub0n]

For Reverse Lookup with Adguard Home, the documentation says to add the reverse servers to "Private reverse DNS servers".
Adding the entries as described for dnsmasq-full: Network -> DHCP and DNS -> Forwards: DNS Forward, some entries in the Realtime graphs can be reverse lookup'd and will be displayed.

AdguardTeam/AdGuardHome#7364
https://github.com/AdguardTeam/Adguardhome/wiki/Configuration#upstreams-for-rdns