Geoff Steckel([email protected]) on 2012.05.25 14:37:29 -0400:
> Thanks very much! I think using NSD for the "outward facing" authoritative
> service makes sense. Retaining BIND is probably best for the internal
> service
> since I see no way to add the local domains, etc. to unbound/nsd while
> retaining recursive search of external servers. It may be possible.
> I just can't see how to do it without truly complex setup.
1. run nsd on 127.0.0.1 (or some other ip != your unbound ip)
2. tell unbound where to ask for your local domain "example.com":
stub-zone:
name: "example.com"
stub-addr: 127.0.0.1
