Hello.

I would be nice to add a third option to allow-remote-requests: "localnets".
This is by analogy with the Bind (quote from its the manual):

"localnets" - matches all the IP address(es) and subnetmasks of the server on which BIND is running. For example, if the server has a single interface with an IP address of 192.168.2.3 and a netmask of 255.255.255.0 (or 192.168.2.2/24) then localnets will match 192.168.2.0 to 192.168.2.255 and 127.0.0.1 (the loopback is always present and has a single address, that is a netmask of 255.255.255.255).

Regards, Sergey.

Hi,

This can be done using Firewall-Filter, nevertheless! i support this idea, it is gonging to be useful specially for home users and users with limited network experience


+1 for DNS access list