<div style="font-family: arial; font-size: 14px;">I re read your emails and you mention "local" IP addresses. Maybe a stub-zone is what you're after? But I don't think that is the case since a stub zone is meant to point to an authoritative server. Maybe someone with a better idea of what you're asking can weigh in.</div><div style="font-family: arial; font-size: 14px;"><br></div><div style="font-family: arial; font-size: 14px;">I use a stub-zone to point to my NSD server.<br><span><br></span></div><div style="font-family: arial; font-size: 14px;"><span>stub-zone:</span><div><span> name: "swills.org"</span></div><div><span> stub-addr: 10.0.10.25</span></div><span></span><br></div><div style="font-family: arial; font-size: 14px;"><br></div><div style="font-family: arial; font-size: 14px;"><span><a target="_blank" rel="noreferrer nofollow noopener" href="https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html?highlight=stub%20zone#stub-zone-options">https://unbound.docs.nlnetlabs.nl/en/latest/manpages/unbound.conf.html?highlight=stub%20zone#stub-zone-options</a></span></div><div style="font-family: arial; font-size: 14px;"><br></div><div style="font-family: arial; font-size: 14px;">Thanks again,</div><div style="font-family: arial; font-size: 14px;">Steven<br></div>
<div class="protonmail_signature_block protonmail_signature_block-empty" style="font-family: arial; font-size: 14px;">
<div class="protonmail_signature_block-user protonmail_signature_block-empty">
</div>
<div class="protonmail_signature_block-proton protonmail_signature_block-empty">
</div>
</div>
<div style="font-family: arial; font-size: 14px;"><br></div><div style="font-family: arial; font-size: 14px;"><br></div><div class="protonmail_quote">
------- Original Message -------<br>
On Friday, March 4th, 2022 at 20:14, Gerben Wierda <gerben.wierda@rna.nl> wrote:<br><br>
<blockquote class="protonmail_quote" type="cite">
Yes, that is what I thought a while back, so I decided at the time to test with this:<div class=""><br class=""></div><div class=""><div class="" style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;"><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures">forward-zone:</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> name: "<a class="" href="http://apple.com" rel="noreferrer nofollow noopener" target="_blank">apple.com</a>."</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> forward-addr: 8.8.8.8@53 # testing if I can forward based on fqdn</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><br class=""></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;">forward-zone:</div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> name: "."</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> # If the forwarding fails, do your own recursion</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> forward-first: yes</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> # Quad9 phising/malware site blocking DNS 9.9.9.9</span></div><div class="" style="margin: 0px; font-stretch: normal; line-height: normal;"><span class="" style="font-variant-ligatures: no-common-ligatures"> forward-addr: 9.9.9.9</span></div><div class=""><span class="" style="font-variant-ligatures: no-common-ligatures"><br class=""></span></div></div></div><div class="">to see if that worked, but all the request kept being forwarded to 9.9.9.9 at the time. I gave up at the time (for another reason) but now I need it again.</div><div class=""><br class=""><div class="">
<div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div><div class="">Gerben Wierda (<a class="" href="https://www.linkedin.com/in/gerbenwierda" rel="noreferrer nofollow noopener" target="_blank">LinkedIn</a>)</div><div class=""><a class="" href="https://ea.rna.nl/" rel="noreferrer nofollow noopener" target="_blank">R&A IT Strategy</a> (main site)<br class="">Book: <a class="" href="https://ea.rna.nl/the-book/" rel="noreferrer nofollow noopener" target="_blank">Chess and the Art of Enterprise Architecture</a><br class="">Book: <a class="" href="https://ea.rna.nl/the-book-edition-iii/" rel="noreferrer nofollow noopener" target="_blank">Mastering ArchiMate</a><br class=""></div></div></div></div></div></div></div></div></div>
</div>
<div><br class=""><blockquote class="" type="cite"><div class="">On 5 Mar 2022, at 03:03, Steven Wills <<a class="" href="mailto:steven@swills.me" rel="noreferrer nofollow noopener" target="_blank">steven@swills.me</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">Hello,<br class=""><br class="">I think what you want is a Forward Zone.<br class=""><br class=""><br class=""><a class="" href="https://docs.netgate.com/tnsr/en/latest/dns/fwd-zone.html" rel="noreferrer nofollow noopener" target="_blank">https://docs.netgate.com/tnsr/en/latest/dns/fwd-zone.html</a><br class=""><br class="">Thank you,<br class="">Steven<br class=""><br class=""><br class=""><br class=""><br class=""><br class=""><br class="">-------- Original Message --------<br class="">On Mar 4, 2022, 19:36, Gerben Wierda via Unbound-users < <a class="" href="mailto:unbound-users@lists.nlnetlabs.nl" rel="noreferrer nofollow noopener" target="_blank">unbound-users@lists.nlnetlabs.nl</a>> wrote:<blockquote class="protonmail_quote"><br class=""><div class="">I am using unbound and it is configured to use cloud9 as a forwarder.<div class=""><br class=""></div><div class="">But <a class="" href="http://spamhaus.org/" rel="noreferrer nofollow noopener" target="_blank">spamhaus.org</a> DNSBL will not answer requests for IP addresses from public DNS, such as cloud9.</div><div class=""><br class=""></div><div class="">So, what I would like to do is configure unbound in such a way that it always goes to cloud9, except when the query is about <a class="" href="http://spamhaus.org/" rel="noreferrer nofollow noopener" target="_blank">spamhaus.org</a>. Can I do that?</div><div class=""><br class=""></div><div class="">If that is not possible, I would like to configure unbound that is forwards everything to cloud9, unless it comes from a specific set of local IP addresses. Is that possible?</div><div class=""><br class=""></div><div class="">Thanks,</div><div class=""><br class=""><div class=""><div class="">
<div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class="" style="caret-color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" dir="auto"><div class=""><div class="">Gerben Wierda (<a class="" href="https://www.linkedin.com/in/gerbenwierda" rel="noreferrer nofollow noopener" target="_blank">LinkedIn</a>)</div><div class=""><a class="" href="https://ea.rna.nl/" rel="noreferrer nofollow noopener" target="_blank">R&A IT Strategy</a> (main site)<br class="">Book: <a class="" href="https://ea.rna.nl/the-book/" rel="noreferrer nofollow noopener" target="_blank">Chess and the Art of Enterprise Architecture</a><br class="">Book: <a class="" href="https://ea.rna.nl/the-book-edition-iii/" rel="noreferrer nofollow noopener" target="_blank">Mastering ArchiMate</a><br class=""></div></div></div></div></div></div></div></div></div>
</div>
<br class=""></div></div></div></blockquote></div></blockquote></div><br class=""></div>
</blockquote><br>
</div>