On Tue, Jun 17, 2014 at 10:09 AM, Over Dexia <over at dexia.de> wrote: > This is by design. Unbound is in front of an nsd on the same host > responsible for resolving a domain. > Therefore I have following, too: > > stub-zone: > name: xy.de > stub-addr: 127.0.0.1 at 58 > > I thought to be able to access this, I'd need the outgoing-interface > 127.0.0.1, too. Wrong? You do not need 'outgoing-interface: 127.0.0.1' in this case. At least I've never needed it and have run several similar setups.