The default setting for "do-not-query-localhost" is "yes". You may want to add "do-not-query-localhost: no" to your config in the "server" section.
On Wed, Nov 4, 2015 at 11:25 AM, Gregory Edigarov <[email protected]> wrote: > Hello, > > Trying to make unbound and nsd co-exist on one server, the goal is to have > unbound listen for all requests redirecting requests for local zones to nsd: > nsd.conf > > server: > server-count: 1 > database: "/var/lib/nsd3/nsd.db" > username: nsd > ip-address: 127.0.0.1@9053 > logfile: "/var/log/nsd.log" > pidfile: "/var/run/nsd.pid" > xfrdfile: "/var/lib/nsd3/xfrd.state" > > zone: > name: somezone.org > zonefile: /etc/nsd/zones/somezone.org > > dig -p9053 somezone.org soa @127.0.0.1 works as expected. > > now unbound's turn: > > server: > auto-trust-anchor-file: "/var/lib/unbound/root.key" > interface: 0.0.0.0 > logfile: /var/log/unbound.log > > stub-zone: > name: somezone.org. # also tried without point with the same > result... > stub-addr: 127.0.0.1@9053 > > dig somezone.org soa @127.0.0.1 yields SERVFAIL. > also tried with forward-zone: - with the same result. > > is that at all possible? Where am I wrong?

