diff --git a/roles/dns-unbound/templates/unbound.conf.j2 b/roles/dns-unbound/templates/unbound.conf.j2
index 1583028..2e1c89f 100644
--- a/roles/dns-unbound/templates/unbound.conf.j2
+++ b/roles/dns-unbound/templates/unbound.conf.j2
@@ -15,7 +15,7 @@
 
   # allow from local networks
   {% for cidr_ipv4 in unbound_interfaces %}
-  access-control: {{ cidr_ipv4 | ipaddr('network') }}/28 allow
+  access-control: {{ cidr_ipv4 }} allow
   {% endfor %}
 
 {% if nsd_zones is defined %}