<html aria-label="message body"><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">Think that 192.168.0.0/16 = 192.168.x.x which includes 192.168.10.0/24 so adding your !192… will only work if if comes in the right sequence relative to the 192.168.0.0/16; (don't recall how priorities work here)<div><br><div>
<div>-- <br>Best regards <br>Sten Carlsen <br><br>A pessimist is a person that can find a problem for every solution.<br><br></div>
</div>
<div><br><blockquote type="cite"><div>On 4 May 2026, at 17.12, poubeline--- via bind-users <bind-users@lists.isc.org> wrote:</div><br class="Apple-interchange-newline"><div>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<div><p>OK, I have found something strange.</p><p>In my named.conf.local file I have:</p><p>acl bogusnets {<br>
0.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3;<br>
10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16;<br>
};</p><p><br>
</p><p>and in my named.conf.options file I have:</p><p> blackhole { bogusnets; };</p><p><br>
</p><p>and in this case I cannot query from my local net.</p><p>If I comment the 'blackhole' line in named.conf.options
everything works.</p><p><br>
</p><p>I don't understand why I cannot query from my local net event if
it is not in the 'bogusnets' ACL.</p><p>Even if I add '!192.168.10.0/24;' in the 'blackhole' or in the
'bogusnets' ACL I cannot query from my local net.</p><p><br>
</p><p>If anyone has a clue, let me know</p>
<br>
</div>
-- <br>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list.<br></div></blockquote></div><br></div></body></html>