If you had added just dom=us-celstream.com ns=192.168.10.1 dnsdebug should have been able to resolve the us-celstream.com addresses. However, adding root entries is better. cheers.