Need a way to attempt forward lookup if recursive lookup fails about unbound

[brianjmurrell]

This would also be useful for a portable (a.k.a. travel) router that can be exposed to all manner of captive portals and walled gardens, etc.

Indeed there are networks out there, in hotels and coffee shops and whatnot that even once logged on (and T&Cs accepted, etc.) to their networks, provide a general Internet experience but only allow DNS queries to their own DNS servers and block queries to the Internet.

But since many other such networks fully allow recursion it would be good to be able use it when you can, to preserve some amount of privacy, while not being completely crippled when one does come across one of the more difficult networks as described above.

As an aside, even in such a hostile network that doesn't allow DNS queries outside of their own servers, I would very quickly restore privacy by starting up a VPN to my home network and then adding a forward-first:, . zone forward to unbound to forward all queries to my own server over the VPN connection. So really, the only query that would go to the captive DNS systems would be the one to get the IP address of my VPN (assuming even it's not baked into the /etc/hosts file on the portable router) endpoint. Thereafter, my VPN's DNS resolver would be used.