unbound - what is wrong

[Wojciech Puchar]

i try to make it resolve both global zones and my own intranet zones

i added to /var/unbound/conf.d/ file intra.conf

private-address: 10.0.0.0/8
local-zone: "10.in-addr.arpa." transparent
local-zone: "intra." transparent
forward-zone:
  name: intra.
  forward-addr: 10.0.1.1
forward-zone:
  name: 10.in-addr.arpa.
  forward-addr: 10.0.1.1


reverse lookups on 10/8 works fine

[root at laptop /var/unbound]# host 10.0.1.1
1.1.0.10.in-addr.arpa domain name pointer intra.

but forward:

[root at laptop /var/unbound]# host intra.
Host intra not found: 2(SERVFAIL)


what is wrong?