[Unbound-users] stub-zone reverse problem

[john]

Hi,
I run unbound as a resolver and I've configured it with a stub zone for 
reverse DNS on a local subnet we use internally, however it doesn't seem 
to send the requests for the zone to the IP specified in the sub-zone 
config. I looked in the archives and found someone else with a similar 
problem:

  http://www.unbound.net/pipermail/unbound-users/2009-May/000583.html

The solution there also works for me. Before this, I had configured 
unbound with:

stub-zone:
   name: "10.10.10.in-addr.arpa."
   stub-addr: a.b.c.d

and with that config I get an answer like this from unbound:



; <<>> DiG 9.5.1-P3 <<>> -t ns 10.10.10.in-addr.arpa. @x.x.x.x
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16381
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;10.10.10.in-addr.arpa.         IN      NS

;; AUTHORITY SECTION:
10.in-addr.arpa.        10800   IN      SOA     localhost. nobody.invalid. 1 3600 1200 604800 10800


If I then apply the 'fix' from the post above:

"local-zone: "10.in-addr.arpa." nodefault"

It answers correctly with the details from the server specified in the 
stub address.

I am not serving any zones from unbound- it is acting purely as a resolver 
so this seems like unbound is serving the 10.in-addr.arpa. authority bit 
when it hasn't been configured to do so. Any ideas why it's doing this?

I'm using the Debian Lenny package (1.0.2-1+lenny1) on this box, but it 
seems to do the same with 1.4.1 built from source.

john