SERVFAIL on one domain, correct response on another

Hi,

I am having a strange problem with Unbound 1.6.0-3+deb9u2 on a Debian
Stretch VM.

I have two private zones, zone1 and zone1.net. Since both zones mostly
contain RFC1918 numbers, I have configured:

Hi,

I've solved it with the help of this nice mailing list.
The answer is to also have

        private-domain: zone1.
        private-domain: zone1.net.

        domain-insecure: zone1.
        domain-insecure: zone1.net.

Nevermind,
Toni