diff --git a/nixos/telperion/config/bind.nix b/nixos/telperion/config/bind.nix
index b523843..55d795d 100644
--- a/nixos/telperion/config/bind.nix
+++ b/nixos/telperion/config/bind.nix
@@ -2,6 +2,14 @@
 ''
 include "${config.sops.secrets."bind/rndc-keys/externaldns".path}";
 
+acl trusted {
+  10.33.44.0/24;  # LAN
+  10.1.1.0/24;    # Servers
+  10.1.2.0/24;    # Trusted
+  10.1.3.0/24;    # IoT
+  10.1.4.0/24;    # Video
+};
+
 zone "jahanson.tech." {
   type master;
   file "${config.sops.secrets."bind/zones/jahanson.tech".path}";