Hello, is it possible with unbound to allow only lookups on whitelisted domains and answer all others with 127.0.0.1 or NXDOMAIN? for example (precedence: white is stronger than black) blacklist * and whitelist google.com and linux.org (and subdomains of them). The lookups for the whitelisted domains should go external (recursive) and not to a local zone file. greetings Carsten