diff --git a/apps/base/bind-internal/resolvers/acls.yaml b/apps/base/bind-internal/resolvers/acls.yaml
index c2f8eaa..05a7f4f 100644
--- a/apps/base/bind-internal/resolvers/acls.yaml
+++ b/apps/base/bind-internal/resolvers/acls.yaml
@@ -8,6 +8,7 @@ metadata:
 spec:
   clusterRef: bind-resolvers
   entries:
+    - 10.42.0.0/16   # k8s pod network (kube-proxy masquerades node-originated LB queries)
     - 198.18.1.10/32
     - 198.18.2.160/27
     - 198.18.21.160/27