On 12/04/2014 12:06, Robert Bradley wrote:
> I noticed today that attempts to visit www.cloudflare.com and other
> subdomains seem to be failing on the latest CeroWRT (3.10.36-4) when
> DNSSEC checks are enabled, but not if I query Google DNS directly.

If it helps, it seems to be an issue with dnssec-check-unsigned again. 
This time though was via Google's DNS.  (Using the Virgin Media DNS
servers, dnssec-check-unsigned kills all DNS as per my previous posts.)

-- 
Robert Bradley