Whitelisting with local-zone + forwarding to local dns server

[Sonic]

On Fri, May 26, 2017 at 12:00 PM, P T via Unbound-users
<unbound-users at unbound.net> wrote:
> So it seems like the catch-all "." line in local-zone is being evaluated
> before forward-zone.

In several installations I use a combination of local zones, stub
zones and forward zones and have never used a construct such as
"local-zone: "." static".