Hi Blason, Your configuration looks correct, though BIND will try to resolve the "wg.custom.block" through your forwarders. What reply do you get from: dig @172.1.254.243 custom.block soa /Peter