On Sat, 12 Apr 2014, Reindl Harald wrote: > a DNS server doing recursion don't ask any forwarder That's wrong. a DNS server can use a forwareder for some or all of its recursive queries. unbound+dnssec-triggerd mostly cause unbound to do full recursion but using the ISP nameserver as forward for all queries. Paul