Index: branches/releng-11/nanobsd/files/etc/crontab
===================================================================
--- branches/releng-11/nanobsd/files/etc/crontab	(revision 13908)
+++ branches/releng-11/nanobsd/files/etc/crontab	(revision 13911)
@@ -4,5 +4,5 @@
 #
 SHELL=/bin/sh
-PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin
+PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
 HOME=/var/log
 #
@@ -31,5 +31,4 @@
 # Write updates for ntp.drift to flash
 0	12	*	*	*	root	/tools/store-ntpdrift
-#
 # Nagios checks
 */15	*	*	*	*	root	/tools/check-inet-alive
@@ -37,3 +36,3 @@
 */15	*	*	*	*	root	/tools/nameserver-shuffle cron
 # Autoritive zone file updater
-0	*	*	*	*	root	sleep `jot -r 1 900` && /tools/update-nsd-zones
+0	*	*	*	*	root	/tools/update-nsd-zones cron
Index: branches/releng-11/nanobsd/files/tools/nameserver-shuffle
===================================================================
--- branches/releng-11/nanobsd/files/tools/nameserver-shuffle	(revision 13908)
+++ branches/releng-11/nanobsd/files/tools/nameserver-shuffle	(revision 13911)
@@ -65,3 +65,6 @@
   $verbose && echo "################################"
   cat $NEWRESOLV > /etc/resolv.conf || exit 1
+
+  # Update unbound forwarders list
+  unbound-control forward $(grep 'nameserver' /etc/resolv.conf | grep -v '127.0.0.1' | awk '{print $2}' | tail -3 )
 fi 
Index: branches/releng-11/nanobsd/files/tools/update-nsd-zones
===================================================================
--- branches/releng-11/nanobsd/files/tools/update-nsd-zones	(revision 13908)
+++ branches/releng-11/nanobsd/files/tools/update-nsd-zones	(revision 13911)
@@ -1,6 +1,16 @@
 #!/bin/sh
 #
-# Update local autoritive DNS server
+# Rick van der Zwet <info@rickvanderzwet.nl>
 #
+# Update local autoritive DNS server, by transfering zone files from master
+# using HTTP protocol
+#
+
+# Avoid hammering source, sleep random delay
+if [ "$1" = "cron" ]; then
+	sleep $(jot -r 1 900)
+fi
+
+# Fetch source files
 fetch -T 5 -o /tmp/dns.tar.gz.enc http://wirelessleiden.nl/dns/latest.tar.gz.enc || exit 1
 
Index: branches/releng-11/nanobsd/files/usr/local/etc/unbound/unbound.conf
===================================================================
--- branches/releng-11/nanobsd/files/usr/local/etc/unbound/unbound.conf	(revision 13908)
+++ branches/releng-11/nanobsd/files/usr/local/etc/unbound/unbound.conf	(revision 13911)
@@ -6,5 +6,5 @@
 # this is a comment.
 
-#Use this to include other text into the file.
+# Bind to specific IP addresses & initial forward zones
 include: "/usr/local/etc/unbound.wleiden.conf"