<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>It looks correct somehow. You can test minimal configuration with
      unbound-host <br>
    </p>
    <p># cat /tmp/fwd.conf <br>
      server:<br>
          tls-system-cert: yes<br>
      <br>
      forward-zone:<br>
         name: "."<br>
         forward-tls-upstream: yes<br>
         forward-first: no<br>
         forward-addr: <a class="moz-txt-link-abbreviated" href="mailto:116.203.32.217@853#fdns1.dismail.de">116.203.32.217@853#fdns1.dismail.de</a><br>
         forward-addr: <a class="moz-txt-link-abbreviated" href="mailto:159.69.114.157@853#fdns2.dismail.de">159.69.114.157@853#fdns2.dismail.de</a><br>
    </p>
    <p># unbound-host -vDC /tmp/fwd.conf example.net<br>
      example.net has address 93.184.215.14 (secure)<br>
      example.net has IPv6 address
      2606:2800:21f:cb07:6820:80da:af6b:8b2c (secure)<br>
      example.net mail is handled by 0 . (secure)<br>
    </p>
    <p>Try a minimal configuration with unbound-host first, then get
      back to unbound daemon. Try commenting most unnecessary parts and
      then uncomment them one by one. I would try it first without
      chroot, when it works well, use chroot too.<br>
    </p>
    <div class="moz-cite-prefix">On 04. 04. 24 23:49, LuMiWa via
      Unbound-users wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:20240404174909.00ccaf13@dismail.de">
      <pre>forward-zone:
   name: "."
   forward-tls-upstream: yes
   forward-first: no
   forward-addr: <a
      class="moz-txt-link-abbreviated moz-txt-link-freetext"
      href="mailto:116.203.32.217@853#fdns1.dismail.de"
      moz-do-not-send="true">116.203.32.217@853#fdns1.dismail.de</a>
   forward-addr: <a
      class="moz-txt-link-abbreviated moz-txt-link-freetext"
      href="mailto:159.69.114.157@853#fdns2.dismail.de"
      moz-do-not-send="true">159.69.114.157@853#fdns2.dismail.de</a></pre>
    </blockquote>
    <pre class="moz-signature" cols="72">-- 
Petr Menšík
Software Engineer, RHEL
Red Hat, <a class="moz-txt-link-freetext" href="http://www.redhat.com/">http://www.redhat.com/</a>
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB</pre>
  </body>
</html>