Hi, You will need:
server:
do-not-query-localhost: no
to forward queries to dnsmasq listening on 127.0.0.1.
I don’t know why Unbound’s default config prohibits to query for localhost.
Is it some security protection?
Regards,
Daisuke Higashi
