leaving aside the topic described above for the moment.
These are my settings for unbound and the upstream proxy.
The DNS of the upstream proxy has the same IP as the proxy.
The validation errors in the log only appear when the upstream proxy is running; otherwise, only the block message appears.
my browser is forced to use the Ipfire Proxy, so i get no block messages for.
The address 127.0.0.1 is shown under connections, but nothing will block here.