Trouble getting dns to resolve through unbound in opnsense

I have an “A” record for my host in cloudflare that resolves with my cloudflare ip (100.x.x.x). i can successfully resolve that:

❯ host mydomain.example.com 1.1.1.1
Using domain server:
Name: 1.1.1.1
Address: 1.1.1.1#53
Aliases:

mydomain.example.com has address 100.x.x.x

I run opnsense at home and my upstream dns is opendns. If i query opendns directly i get a successful result

❯ host mydomain.example.com 208.67.220.220
Using domain server:
Name: 208.67.220.220
Address: 208.67.220.220#53
Aliases:

mydomain.example.com has address 100.x.x.x

But when i directly query opnsense (which runs unbound) i dont get a resolution

❯ host mydomain.example.com 192.168.1.1
Using domain server:
Name: 192.168.1.1
Address: 192.168.1.1#53
Aliases:

Any ideas why it seems like unbound or opnsense is filtering out that query??

So this totally seems like unbound! heres a log entry I found:

unbound[62338]	[62338:2] debug: sanitize: removing public name with private address <mydomain.example.com.> 100.x.x.x#53

any ideas how to disable this?