> # unbound-control auth_zone_reload rpz.test ? ? $ nslookup whitehouse.com > DO NOT use web browser! (porn) > Useful only for testing block filters.
Oops I typed the last part to quickly. Restarting unbound with rcctl restart unbound works but that's overkill. It should by reloading just the zone # unbound-control auth_zone_reload rpz.test ok (after editing the rpz.zone file) My biggest mistake is the nslookup. In testing use nslookup whitehouse.com 127.0.0.1 The 127.0.0.1 is important so it goes to unbound instead of what's configured in resolc.conf! I did append 127.0.0.1 in my testing but forgot to type it when creating my post and that was a big boo boo.

