> For the complete documentation index, see [llms.txt](https://docs.dnsvault.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.dnsvault.net/service-management/dns/access-control-list.md).

# ACL

Access Control List

The ACL clause allows fine-grained control over what hosts or users may perform what operations on the DNSVAULT.

You can navigate to ACL:

{% hint style="info" %}
SIDE BAR > SERVICE MANAGEMENT > DNS > ACL
{% endhint %}

**acl**'s define a address\_match\_list e.g. IP address(es), which can then be referenced (used) in a number of statements and the [view ](/service-management/dns/create-new-domain.md)clause(s). **acl**'s MUST be defined before they are referenced in any statement or clause. For this reason they are usually defined first in the named.conf file. 'acl-name' is an arbitrary (but unique) quoted string defining the specific list. The 'acl-name' is the method used to subsequently reference the particular list. Any number of **acl**'s may be defined.

The following special **acl-name** values are built into BIND:

1. **"none"** - matches no hosts
2. **"any"** - matches all hosts
3. **"localhost"** - matches all the IP address(es) of the server on which BIND is running e.g. if the server has a single interface with an IP address of 192.168.2.3 then localhost will match 192.168.2.3 and 127.0.0.1 (the loopback address is always present).
4. **"localnets"** - matches all the IP address(es) and subnetmasks of the server on which BIND is running i.e. if the server has a single interface with an IP address of 192.168.2.3 and a netmask of 255.255.255.0 (or 192.168.2.2/24) then localnets will match 192.168.2.0 to 192.168.2.255 and 127.0.0.1 (the loopback is assumed to be a single address). Some systems do not provide a way to determine the prefix lengths of local IPv6 addresses. In such a case, localnets only matches the local IPv6 addresses, just like localhost.

![](https://2014779496-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MdQaZzI76y0iDZ955DD%2F-MecLL7YuvtZAGoluECP%2F-MecMwIctznxo807mHj9%2Fimage.png?alt=media\&token=ffc5fa61-9f1a-4747-bd5c-633f66a5c407)