acl "trusted" {
    127.0.0.0/8;
    10.0.0.0/8;
    172.0.0.0/12;
    192.168.0.0/16;
    ::1/128;
    2001:db8:edfa:1234::/64;
    localhost;
    localnets;
};