Unbound config

server:
    interface: 0.0.0.0
    interface-automatic: yes
    access-control: 0.0.0.0/0 allow
    verbosity: 1
    num-threads: 4
    do-daemonize: yes
    cache-max-ttl: 60
    do-ip4: yes
    do-ip6: no
    do-udp: yes
    do-tcp: yes
    chroot: "/etc/unbound"
    username: "unbound"
    directory: "/etc/unbound"
    log-time-ascii: yes
    pidfile: "/var/run/unbound/unbound.pid"
    hide-identity: yes
    hide-version: yes
    local-zone: "obscured.edu.au" nodefault
    local-zone: "10.in-addr.arpa" nodefault
    local-zone: "239.in-addr.arpa" nodefault

# Forward all requests to the IPs below unless they match one of the stub zones
forward-zone:
    name: "."
    forward-addr: 111.111.111.111
    forward-addr: 222.222.222.222

stub-zone:
    name: "obscured.edu.au"
    stub-addr: 10.0.0.1
    stub-addr: 10.0.0.2
    stub-addr: 10.0.0.3
    stub-prime: "no"

stub-zone:
    name: "10.in-addr.arpa"
    stub-addr: 10.0.0.1
    stub-addr: 10.0.0.2
    stub-addr: 10.0.0.3
    stub-prime: "no"

stub-zone:
    name: "239.in-addr.arpa"
    stub-addr: 10.0.0.1
    stub-addr: 10.0.0.2
    stub-addr: 10.0.0.3
    stub-prime: "no"