I have discovered that the main Deco in my setup does DNS queries for a couple of websites: Dec 10 11:45:36 dnsmasq[80567]: query[A] facebook.com from 192.168.0.3 Dec 10 11:46:26 dnsmasq[80567]: query