Secure DNS problem

Avast Pro

Secure DNS when on bungles my internal DNS server replies and doesn’t resolve my various network resources
correctly instead it returns non-authoritative answer and an ip of my public WAN address.

when I turn secure DNS off function returns to my workstation DNS resolve.

I like the idea of the feature but it needs tweeked.