diff --git a/cmd/cli/loop.go b/cmd/cli/loop.go
index a9d3972..ec25840 100644
--- a/cmd/cli/loop.go
+++ b/cmd/cli/loop.go
@@ -60,6 +60,11 @@ func (p *prog) checkDnsLoop() {
 		if p.um.isDown("upstream." + n) {
 			continue
 		}
+		// Do not send test query to external upstream.
+		if !canBeLocalUpstream(uc.Domain) {
+			mainLog.Load().Debug().Msgf("skipping external: upstream.%s", n)
+			continue
+		}
 		uid := uc.UID()
 		p.loop[uid] = false
 		upstream[uid] = uc