On Sun, Jul 27, 2014 at 5:20 AM, Patrik Lundin <patrik.lundin....@gmail.com> wrote: > My understanding is that "transparent" is used when you want to override > certain records in a zone with local-data configured in unbound.conf. > Given that you have no such things in the pasted configuration > "nodefault" is probably a better choice.
>From the man page: "You can also selectively unblock a part of the zone by making that part transparent with a local-zone statement. This also works with the other default zones." So if you're prepared to answer queries for all of 10.0.0.0/8 maybe "nodefault" may be correct, and your stub-zone should be prepared to do so. But if you want to only answer queries for part of that default zone then "transparent" is the proper choice. I've been running unbound for years on 7 different servers using "transparent" as I've outlined and it has worked flawlessly. Chris
