diff --git a/deployments/dns/bind.yaml b/deployments/dns/bind.yaml
index 582ad26..8724eba 100644
--- a/deployments/dns/bind.yaml
+++ b/deployments/dns/bind.yaml
@@ -11,6 +11,10 @@ metadata:
   namespace: dns
 data:
   named.conf: |
+    acl "slaves" {
+      10.42.0.0/16;
+    };
+
     options {
         directory "/var/cache/bind";
 
@@ -24,10 +28,6 @@ data:
             10.40.0.254;
         };
 
-        acl "slaves" {
-          10.0.0.0/8;
-        };
-
         allow-transfer { "slaves"; };
 
         dnssec-validation auto;