When I enable Conditional Forwarding and DNSSEC pihole (or dnsmasq?) tries to resolve the DS records for the conditional forwarded addresses which are not available and the A record is not returned to client.
When I disable DNSSEC the A record is requested from my dhcp server (cached in example below) and returned.
DNSSEC and Conditional Forwarding Enabled:
2025-07-30 20:50:48.477 forwarded tasmota-shelter.lan to 172.30.30.254
2025-07-30 20:50:48.482 dnssec-query[DS] lan to 172.30.30.254
2025-07-30 20:50:49.481 dnssec-retry[DS] lan to 172.30.30.254
DNSSEC Disabled and Conditional Forwarding Enabled:
2025-07-30 20:54:26.113 cached-stale tasmota-shelter.lan is 172.30.31.106
2025-07-30 20:54:26.113 forwarded tasmota-shelter.lan to 172.30.30.254
2025-07-30 20:54:26.124 reply tasmota-shelter.lan is 172.30.31.106
Is it possible to disable DNSSEC for conditional forwarded requests?