acl trusted { localhost; localnets; };
acl nameservers { localhost; };