diff --git a/dnsmasq.d/01-you-dont-need-pihole.conf b/dnsmasq.d/01-you-dont-need-pihole.conf
index 483a924..3bf4709 100644
--- a/dnsmasq.d/01-you-dont-need-pihole.conf
+++ b/dnsmasq.d/01-you-dont-need-pihole.conf
@@ -11,21 +11,27 @@
 # You may NOT use this software for commercial purposes.
 ###############################################################################
 
-# Do not load /etc/hosts as a dataset for replies. (By default dnsmasq performs
-# an implicit "addn-hosts=/etc/hosts"; this prevents it.)
-no-hosts
-
 # Add our block lists
 addn-hosts=/etc/you-dont-need-pihole/local.list
 addn-hosts=/etc/you-dont-need-pihole/custom.list
 addn-hosts=/etc/you-dont-need-pihole/block.list
 
-# Return answers to DNS queries from /etc/hosts.
-#localise-queries
+# Never forward addresses in the non-routed address spaces.
+bogus-priv
 
 # In-memory cache size.
 cache-size=10000
 
+# Never forward plain names (without a dot or domain part)
+domain-needed
+
+# Do not load /etc/hosts as a dataset for replies. (By default dnsmasq performs
+# an implicit "addn-hosts=/etc/hosts"; this prevents it.)
+no-hosts
+
+# Return answers to DNS queries from /etc/hosts.
+#localise-queries
+
 # Don't log queries - only startup/shutdown messages. (Un-comment this option
 # for debugging.)
 #log-queries