Install Unbound Dns on Centos

First make repo

nano /etc/yum.repos.d/centalt.repo
[CentALT]
name=CentALT Packages for Enterprise Linux 5 - $basearch
baseurl=http://centos.alt.ru/repository/centos/5/$basearch/
enabled=1
gpgcheck=0
yum install unbound bind-utils -y
cd /etc/unbound
wget  ftp://FTP.INTERNIC.NET/domain/named.cache
unbound-control-setup
chown unbound:root unbound_*
chmod 440 unbound_*
nano /etc/unbound/unbound.conf

server:
         verbosity: 1
         statistics-interval: 120
         num-threads: 1
         interface: 0.0.0.0

         outgoing-range: 512
         num-queries-per-thread: 1024

         msg-cache-size: 16m
         rrset-cache-size: 32m 

         msg-cache-slabs: 4
         rrset-cache-slabs: 4

         cache-max-ttl: 86400
         infra-host-ttl: 60
         infra-lame-ttl: 120
         
         infra-cache-numhosts: 10000
         infra-cache-lame-size: 10k

         do-ip4: yes
         do-ip6: no
         do-udp: yes
         do-tcp: yes
         do-daemonize: yes

         #access-control: 0.0.0.0/0 allow
         access-control: 192.168.0.0/16 allow
         access-control: 172.16.0.0/12 allow
         access-control: 10.0.0.0/8 allow
         access-control: 127.0.0.0/8 allow
         access-control: 0.0.0.0/0 refuse
      
         chroot: "/etc/unbound"
         username: "unbound"
         directory: "/etc/unbound"
         #logfile: "/etc/unbound/unbound.log"
         #use-syslog: yes
         logfile: ""
         use-syslog: no
         pidfile: "/etc/unbound/unbound.pid"
         root-hints: "/etc/unbound/named.cache"
       
        identity: "DNS"
        version: "1.4"
        hide-identity: yes
        hide-version: yes
        harden-glue: yes
        do-not-query-address: 127.0.0.1/8
        do-not-query-localhost: yes
        module-config: "iterator"

        #zone localhost
        local-zone: "localhost." static 
        local-data: "localhost. 10800 IN NS localhost."
        local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800" 
        local-data: "localhost. 10800 IN A 127.0.0.1" 

        local-zone: "127.in-addr.arpa." static 
        local-data: "127.in-addr.arpa. 10800 IN NS localhost." 
        local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800" 
        local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost." 
       
        #zone alvacode.blogspot.com
        local-zone: "alvacode.blogspot.com." static
        local-data: "alvacode.blogspot.com. 86400 IN NS ns1.alvacode.blogspot.com."
        local-data: "alvacode.blogspot.com. 86400 IN SOA alvacode.blogspot.com. hostmaster.alvacode.blogspot.com.  3 3600 1200 604800 86400"
        local-data: "alvacode.blogspot.com. 86400 IN A 192.168.1.1"
        local-data: "www.alvacode.blogspot.com. 86400 IN A 192.168.1.1"
        local-data: "ns1.alvacode.blogspot.com. 86400 IN A 192.168.1.1"
      
        local-data: "mail.alvacode.blogspot.com. 86400 IN A 192.168.1.5"
        local-data: "alvacode.blogspot.com. 86400 IN MX 10 mail.alvacode.blogspot.com."
        local-data: "alvacode.blogspot.com. 86400 IN TXT v=spf1 a mx ~all"

       local-zone: "1.168.192.in-addr.arpa." static
       local-data: "1.168.192.in-addr.arpa. 10800 IN NS alvacode.blogspot.com."
       local-data: "1.168.192.in-addr.arpa. 10800 IN SOA alvacode.blogspot.com. hostmaster.alvacode.blogspot.com. 4 3600 1200 604800 864000"
       local-data: "1.1.168.192.in-addr.arpa. 10800 IN PTR alvacode.blogspot.com."

forward-zone: 
        name: "."
        forward-addr: 8.8.8.8
        forward-addr: 8.8.4.4

remote-control:
        control-enable: yes
        control-interface: 127.0.0.1
        control-port: 953
        server-key-file: "/etc/unbound/unbound_server.key"
        server-cert-file: "/etc/unbound/unbound_server.pem"
        control-key-file: "/etc/unbound/unbound_control.key"
        control-cert-file: "/etc/unbound/unbound_control.pem"
Before start unbound please change your nameserver
nano /etc/resolv.conf
uncomment  your default nameserver

insert this nameserver
nameserver 127.0.0.1
reboot your server

to check your unbound active try this
nslookup 192.168.1.1
must be like this
Server:         127.0.0.1
Address:        127.0.0.1#53

1.1.168.192.in-addr.arpa       name =alvacode.blogspot.com.
nslookup alvacode.blogspot.com
Server:         127.0.0.1
Address:        127.0.0.1#53

Name:   alvacode.blogspot.com
Address: 192.168.1.1
unbound-control stats
thread0.num.queries=38
thread0.num.cachehits=7
thread0.num.cachemiss=31
thread0.num.recursivereplies=31
thread0.requestlist.avg=0.129032
thread0.requestlist.max=1
thread0.requestlist.overwritten=0
thread0.requestlist.exceeded=0
thread0.requestlist.current.all=0
thread0.requestlist.current.user=0
thread0.recursion.time.avg=0.088811
thread0.recursion.time.median=0.0185685
thread1.num.queries=10
thread1.num.cachehits=1
thread1.num.cachemiss=9
thread1.num.recursivereplies=9
thread1.requestlist.avg=0
thread1.requestlist.max=0
thread1.requestlist.overwritten=0
thread1.requestlist.exceeded=0
thread1.requestlist.current.all=0
thread1.requestlist.current.user=0
thread1.recursion.time.avg=0.049576
thread1.recursion.time.median=0.016384
total.num.queries=48
total.num.cachehits=8
total.num.cachemiss=40
total.num.recursivereplies=40
total.requestlist.avg=0.1
total.requestlist.max=1
total.requestlist.overwritten=0
total.requestlist.exceeded=0
total.requestlist.current.all=0
total.requestlist.current.user=0
total.recursion.time.avg=0.079984
total.recursion.time.median=0.0174763
time.now=1281681396.583885
time.up=7299.491047
time.elapsed=4177.655650