Bob Harold <rharolde at umich.edu> wrote: > Next, it might complain about 24.51.220.94/21 on enp1s0. Try adding: > > subnet 24.51.220.94 netmask 255.255.248.0 { > }; Or configure the daemon to only listen on the interfaces it serves. Given that enp1s0 is the internet facing interface, not listeing on it would be good security practice.