I think you configure unbound with another forward-zone: name: “zen.spamhaus.org” and then don’t list any forwarding addresses. That should turn off forwarding for that zone.
A forum for your OS or for unbound will probably give an authoritative answer — Noel Jones > On Mar 4, 2022, at 7:32 PM, Gerben Wierda <gerben.wie...@rna.nl> wrote: > > I am already running my own unbound resolver. > > Van I configure my unbound in such a way that it forwards everything to > 9.9.9.9 (which is my setting so I can use its blocking) except DNS queries > for spamhaus.org? > > If not, I need some way to tell postfix to use another resolver than the > default one. > > Or I must forego the use of 9.9.9.9 and lose its DNS blocking of ‘evil’ > hosts. > > G > >> On 4 Mar 2022, at 19:57, Noel Jones <njo...@megan.vbhcs.org> wrote: >> >> >>> On 3/4/2022 11:58 AM, Gerben Wierda wrote: >>> >>> Feb 27 06:02:19 mail postfix/dnsblog[46930]: addr 113.197.35.193 listed by >>> domain zen.spamhaus.org <http://zen.spamhaus.org> as *127.255.255.254* >> >> This query was made on 27 Feb via a public DNS nameserver that is blocked by >> spamhaus. >> >> >>> Mar 04 18:44:25 mail postfix/dnsblog[88230]: addr 189.51.96.252 listed by >>> domain zen.spamhaus.org <http://zen.spamhaus.org> as *127.0.0.4* >> >> This query on 04 Mar was made via a different DNS nameserver that was not >> blocked by spamhaus. >> >> If you're using a public DNS service, it's possible some of their back-end >> servers are blocked and some aren't, which will give you unpredictable >> results. >> >> To fix, insure you either use a local DNS nameserver installed on your >> computer, such as unbound, or sign up for the free (for low volume) Spamhaus >> Data Query Service >> >> >> >> -- Noel Jones >