Inspect the Real DNS Resolver Configuration with scutil --dns

scutil --dns shows every resolver macOS actually consults, including VPN and scoped resolvers that /etc/resolv.conf hides.

macOSresolverscutilDNSLow risk

Run `scutil --dns` in Terminal to print the complete, current DNS resolver list used by the system.

01Command

Command

$ scutil --dns

02What it does

macOS ignores /etc/resolv.conf for most lookups; the authoritative resolver state comes from the System Configuration framework, including VPN-pushed DNS, search domains, and per-domain scoped resolvers. scutil --dns dumps all of it, split into 'resolver #N' blocks where the first is the default and later ones handle specific domains (VPN split DNS). It's the go-to command when a hostname resolves on one network but not another.

03Risk

RiskLow risk

RequirementsBuilt-in on macOS.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

Use DNS over HTTPS/TLS on macOS
Apple · vendor-doc · 2026-09-17
Evidence: Apple's DNS configuration documentation explains scoped and default resolvers that scutil --dns reports.
scutil — manage system configuration parameters
SS64 · technical · 2026-09-17
Evidence: Documents scutil --dns as the way to show the DNS resolver configuration communicated by System Configuration.

Last verified: 2026-09-17 · Category: Network