This is an old revision of the document!

Networking - DNS - Unbound - Recursive Queries

Control which clients are allowed to make (recursive) queries to the server.

Specify classless netblocks with /size and action.

access-control: 0.0.0.0/0 refuse
access-control: 127.0.0.0/8 allow
access-control: ::0/0 refuse
access-control: ::1 allow
access-control: ::ffff:127.0.0.1 allow

NOTE: By default everything is refused, except for localhost.

Options include:

deny - Drop message.
refuse - Polite error reply.
allow - Recursive ok.
allow_setrd - Rrecursive ok, rd bit is forced on.
allow_snoop - Recursive and non-recursive ok. * deny_non_local - Drop queries unless can be answered from local-data. * refuse_non_local - Like deny_non_local** but polite error reply.