<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div>Chris,</div><div><br></div><div>Yes. Point well taken. I thought I had carefully reviewed the unbound.conf prior to installation but evidently I missed this one. In any case, I've fixed it in unbound.conf but after shutting down unbound and starting it again, I still get the same results:</div><div><br></div><div><div><b># dig 158.24.39.46.<a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.</b></div><div><br></div><div>; <<>> DiG 9.9.4-rpz2.13269.14-P2 <<>> 158.24.39.46.<a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.</div><div>;; global options: +cmd</div><div>;; Got answer:</div><div>;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 533</div><div>;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1</div><div><br></div><div>;; OPT PSEUDOSECTION:</div><div>; EDNS: version: 0, flags:; udp: 4096</div><div>;; QUESTION SECTION:</div><div>;158.24.39.46.<a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>A</div><div><br></div><div>;; AUTHORITY SECTION:</div><div><a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.<span class="Apple-tab-span" style="white-space:pre"> </span>3600<span class="Apple-tab-span" style="white-space:pre"> </span>IN<span class="Apple-tab-span" style="white-space:pre"> </span>SOA<span class="Apple-tab-span" style="white-space:pre"> </span>need.to.know.only. <a href="http://hostmaster.spamhaus.org">hostmaster.spamhaus.org</a>. 1407271455 3600 600 432000 150</div><div><br></div><div>;; Query time: 855 msec</div><div>;; SERVER: 127.0.0.1#53(127.0.0.1)</div><div>;; WHEN: Sun Jul 27 17:00:59 CEST 2014</div><div>;; MSG SIZE rcvd: 122</div><div><br></div><div><br></div><div><b># nslookup 158.24.39.46.<a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.</b></div><div>Server:<span class="Apple-tab-span" style="white-space:pre"> </span>127.0.0.1</div><div>Address:<span class="Apple-tab-span" style="white-space:pre"> </span>127.0.0.1#53</div><div><br></div><div>** server can't find 158.24.39.46.<a href="http://zen.spamhaus.org">zen.spamhaus.org</a>.: NXDOMAIN</div></div><div><br></div><div>Patrick</div><div><br></div><div><br></div><div><div>On Jul 27, 2014, at 7:18 AM, Sonic <<a href="mailto:sonicsmith@gmail.com">sonicsmith@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite">On Sun, Jul 27, 2014 at 10:11 AM, Sonic <<a href="mailto:sonicsmith@gmail.com">sonicsmith@gmail.com</a>> wrote:<br><blockquote type="cite">Suggest you simplify<br>your unbound.conf and use the man page as a guide vs a third party<br>site.<br></blockquote><br>Indeed - I bet this is your problem.<br><br>Looking at the Calomel site they list these private address ranges:<br>=================================<br> private-address: 10.0.0.0/8<br> private-address: 172.16.0.0/12<br> private-address: 10.0.0.0/16<br> private-address: 192.254.0.0/16<br>=================================<br>Which is incorrect.<br>The default private address ranges should be:<br>=================================<br> private-address: 10.0.0.0/8<br> private-address: 172.16.0.0/12<br> private-address: 192.168.0.0/16<br> private-address: 169.254.0.0/16<br>=================================<br>By including 192.254.0.0/16 you are blocking proper resolution of many<br>valid IP blocks.<br><br>Blindly relying on third party sites for information can be dangerous.<br><br>Chris<br></blockquote></div><br></body></html>