<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Hi Sten,</p>
<p><br>
</p>
<p>I might need new glasses or change my brain sometimes as I missed
this /16 for the 192.168.0.0 IP range.</p>
<p>I updated my bogusnets ACL with !192.168.10.0/24 before the
192.168.0.0/16 and all is working like a charm now.</p>
<p>I knew there was something in this part but couldn't think of
something else as I was struggling on this for a long time and I
should have been very tired.</p>
<p><br>
</p>
<p>Thanks for pointing me in the right direction!</p>
<p><br>
</p>
<p>Best regards,</p>
<p>Laurent</p>
<p><br>
</p>
<p><br>
</p>
<div class="moz-cite-prefix">Le 04/05/2026 à 21:01, Sten Carlsen a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:2F04DF20-F12E-4A7B-BC73-ED9D67A2645B@s-carlsen.dk">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
Think that 192.168.0.0/16 = 192.168.x.x which includes
192.168.10.0/24 so adding your !192… will only work if if comes
in the right sequence relative to the 192.168.0.0/16; (don't
recall how priorities work here)
<div><br>
<div>
<div>-- <br>
Best regards <br>
Sten Carlsen <br>
<br>
A pessimist is a person that can find a problem for every
solution.<br>
<br>
</div>
</div>
<div><br>
<blockquote type="cite">
<div>On 4 May 2026, at 17.12, poubeline--- via bind-users
<a class="moz-txt-link-rfc2396E" href="mailto:bind-users@lists.isc.org"><bind-users@lists.isc.org></a> wrote:</div>
<br class="Apple-interchange-newline">
<div>
<meta http-equiv="Content-Type"
content="text/html; charset=UTF-8">
<div>
<p>OK, I have found something strange.</p>
<p>In my named.conf.local file I have:</p>
<p>acl bogusnets {<br>
0.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3;<br>
10.0.0.0/8; 172.16.0.0/12; 192.168.0.0/16;<br>
};</p>
<p><br>
</p>
<p>and in my named.conf.options file I have:</p>
<p> blackhole { bogusnets; };</p>
<p><br>
</p>
<p>and in this case I cannot query from my local net.</p>
<p>If I comment the 'blackhole' line in
named.conf.options everything works.</p>
<p><br>
</p>
<p>I don't understand why I cannot query from my local
net event if it is not in the 'bogusnets' ACL.</p>
<p>Even if I add '!192.168.10.0/24;' in the 'blackhole'
or in the 'bogusnets' ACL I cannot query from my local
net.</p>
<p><br>
</p>
<p>If anyone has a clue, let me know</p>
<br>
</div>
-- <br>
Visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to
unsubscribe from this list.<br>
</div>
</blockquote>
</div>
<br>
</div>
</blockquote>
</body>
</html>