<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    thanks all!  Got it, I think!<br>
    <br>
    Needed the "domain-insecure" bits, then reverse DNS was failing so I
    also needed to change the local-zone as Patrik mentioned.<br>
    <br>
    Complete unbound.conf now:<br>
    <br>
    <title>Konsole output</title>
    <div>
      <span style="font-family:monospace"><span
          style="color:#000000;background-color:#ffffff;">server:
        </span><br>
         interface: 127.0.0.1
        <br>
         interface: 192.168.1.50
        <br>
         use-syslog: yes
        <br>
         username: "unbound"
        <br>
         directory: "/etc/unbound"
        <br>
         trust-anchor-file: trusted-key.key
        <br>
         access-control: 192.168.1.0/24 allow_snoop
        <br>
         local-zone: "1.168.192.in-addr.arpa." transparent
        <br>
         do-not-query-localhost: no
        <br>
         domain-insecure: "datanet.home"
        <br>
         domain-insecure: "1.168.192.in-addr.arpa"
        <br>
        remote-control:
        <br>
         control-enable: yes
        <br>
         control-interface: 127.0.0.1
        <br>
         control-port: 8953
        <br>
         server-key-file: "/etc/unbound/unbound_server.key"
        <br>
         server-cert-file: "/etc/unbound/unbound_server.pem"
        <br>
         control-key-file: "/etc/unbound/unbound_control.key"
        <br>
         control-cert-file: "/etc/unbound/unbound_control.pem"
        <br>
        <br>
        stub-zone:
        <br>
         name: "datanet.home"
        <br>
         stub-addr: 192.168.1.50@53530
        <br>
        stub-zone:
        <br>
         name: "1.168.192.in-addr.arpa"
        <br>
         stub-addr: 192.168.1.50@53530<br>
        <br>
      </span></div>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
    <br>
  </body>
</html>