services.bind.cacheNetworks

What networks are allowed to use us as a resolver. Note that this is for recursive queries -- all networks are allowed to query zones configured with the zones option by default (although this may be overridden within each zone's configuration, via the allowQuery option). It is recommended that you limit cacheNetworks to avoid your server being used for DNS amplification attacks.

Type

list of string

Default

[
  "127.0.0.0/24"
  "::1/128"
]

Declared

<nixpkgs/nixos/modules/services/networking/bind.nix>