Local-zone and local-data ignored?

Hi all,

I recently installed unbound on my centos 5.2 system, and have been very pleased so far.

I have attempted to add some local-zone and local-data stanzas, but regardless of the type specification, the data seems to be ignored. Here's my unbound.conf:

server:
         verbosity: 1
         statistics-interval: 3600
         num-threads: 2
         interface: 0.0.0.0
         do-ip6: no
         access-control: 192.168.1.0/24 allow
         access-control: 127.0.0.1/32 allow
         access-control: 0.0.0.0/0 refuse
         chroot: "/var/lib/unbound"
         username: "unbound"
         pidfile: "/var/run/unbound/unbound.pid"
         root-hints: "/var/lib/unbound/named.cache"
         hide-identity: yes
         hide-version: yes
         harden-glue: yes
         harden-dnssec-stripped: yes
         use-caps-for-id: no
         val-permissive-mode: no
local-zone: "sundawg.org." transparent
local-data: "test1.sundawg.org IN A 192.168.1.110"

Here's debug from the query:

[1233413234] libunbound[10058:0] notice: init module 0: validator
[1233413234] libunbound[10058:0] notice: init module 1: iterator
[1233413234] libunbound[10058:0] info: resolving <test1.sundawg.org. A

[1233413234] libunbound[10058:0] info: priming . IN NS
[1233413234] libunbound[10058:0] info: response for <. NS IN>
[1233413234] libunbound[10058:0] info: reply from <.> 192.112.36.4#53
[1233413234] libunbound[10058:0] info: query response was ANSWER
[1233413234] libunbound[10058:0] info: priming successful for <. NS IN> [1233413234] libunbound[10058:0] info: response for <test1.sundawg.org. A IN>
[1233413234] libunbound[10058:0] info: reply from <.> 192.5.5.241#53
[1233413234] libunbound[10058:0] info: query response was REFERRAL
[1233413234] libunbound[10058:0] notice: sendto failed: Network is unreachable
[1233413234] libunbound[10058:0] info: remote address is 2001:500:40::1 port 53 [1233413234] libunbound[10058:0] notice: error sending query to auth server; skip this address
[1233413234] libunbound[10058:0] info: error for address: 2001:500:40::1 port 53
[1233413234] libunbound[10058:0] notice: sendto failed: Network is unreachable
[1233413234] libunbound[10058:0] info: remote address is 2001:500:40::1 port 53
[1233413234] libunbound[10058:0] notice: error sending query to auth server; skip this address
[1233413234] libunbound[10058:0] info: error for address: 2001:500:40::1 port 53
[1233413234] libunbound[10058:0] notice: sendto failed: Network is unreachable
[1233413234] libunbound[10058:0] info: remote address is 2001:500:e::1 port 53
[1233413234] libunbound[10058:0] notice: error sending query to auth server; skip this address
[1233413234] libunbound[10058:0] info: error for address: 2001:500:e::1 port 53
[1233413234] libunbound[10058:0] notice: sendto failed: Network is unreachable
[1233413234] libunbound[10058:0] info: remote address is 2001:500:b::1 port 53
[1233413234] libunbound[10058:0] notice: error sending query to auth server; skip this address
[1233413234] libunbound[10058:0] info: error for address: 2001:500:b::1 port 53
[1233413234] libunbound[10058:0] notice: sendto failed: Network is unreachable
[1233413234] libunbound[10058:0] info: remote address is 2001:500:c::1 port 53
[1233413234] libunbound[10058:0] notice: error sending query to auth server; skip this address
[1233413234] libunbound[10058:0] info: error for address: 2001:500:c::1 port 53
[1233413234] libunbound[10058:0] info: response for <test1.sundawg.org. A IN>
[1233413234] libunbound[10058:0] info: reply from <org.> 199.19.57.1#53
[1233413234] libunbound[10058:0] info: query response was REFERRAL
[1233413235] libunbound[10058:0] info: response for <test1.sundawg.org. A IN>
[1233413235] libunbound[10058:0] info: reply from <sundawg.org.> 63.227.7.65#53
[1233413235] libunbound[10058:0] info: query response was ANSWER
Host test1.sundawg.org not found: 3(NXDOMAIN).

I've also tried type of "static", but with similar results.

Any suggestions?

Thanks,

Drew

Hi Drew,

The config you show should work, I just tried it.

I think that the unbound.conf that you are editing is not the
unbound.conf that is read in by the daemon. The do-ip6: no, and the
IPv6 errors in the log also support this. Those errors should not have
been there.

If you type 'unbound -h' it lists the default config file it picks.
Is this /var/lib/unbound/unbound.conf ?

unbound -c my.conf starts unbound with a specific config.

Best regards,
   Wouter

Drew wrote: