server: interface: 127.0.0.1 interface: ::1 access-control: 0.0.0.0/0 deny access-control: 0::0/0 deny access-control: 127.0.0.0/8 allow access-control: ::1/128 allow {% for listen in unbound_cache_listen%} interface: {{ listen|ipaddr('address') }} access-control: {{ listen|ipaddr('network/prefix') }} allow {% endfor %} do-not-query-localhost: no hide-identity: yes hide-version: yes