diff --git a/etc/systemd/resolved.conf.d/10-dot-cloudflare.conf b/etc/systemd/resolved.conf.d/10-dot-cloudflare.conf
index 3cf78471..a092606a 100644
--- a/etc/systemd/resolved.conf.d/10-dot-cloudflare.conf
+++ b/etc/systemd/resolved.conf.d/10-dot-cloudflare.conf
@@ -1,5 +1,8 @@
 [Resolve]
-DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com
+# Unfiltered
+#DNS=2606:4700:4700::1111#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com 1.1.1.1#cloudflare-dns.com 2606:4700:4700::1111#one.one.one.one 1.1.1.1#one.one.one.one 1.0.0.1#one.one.one.one  2606:4700:4700::1001#one.one.one.one
+# Malicious domain filtering
+DNS=2606:4700:4700::1112#security.cloudflare-dns.com 2606:4700:4700::1002#security.cloudflare-dns.com 1.1.1.2#security.cloudflare-dns.com 1.0.0.2#security.cloudflare-dns.com
 #DNSOverTLS=true
 
 # vim: filetype=systemd