Hi, It worked for me w/ "for-downstream: no"
---- # ns1.autosign.info is my real nameserver, serving "realzone.com" for test stub-zone: name: "realzone.com" stub-host: ns1.autosign.info. auth-zone: name: internalzone.io zonefile: "internalzone-file" for-downstream: no ---- $ dig @::1 git.internalzone.io .... ;; ANSWER SECTION: git.internalzone.io. 3600 IN CNAME git.realzone.com. git.realzone.com. 3600 IN A 10.0.0.1 -- Daisuke HIGASHI 2018-03-29 23:03 GMT+09:00 jpdolz via Unbound-users <[email protected]>: > Hello guys, > > this week I've been playing with the new "auth-zone" feature of 1.7 version, > trying to fix the "classical" handicap with the CNAME record.
