diff --git a/scripts/dns.nft b/scripts/dns.nft
index 8cfd60d..c51b44f 100644
--- a/scripts/dns.nft
+++ b/scripts/dns.nft
@@ -1,4 +1,8 @@
 table ip nat {
+    chain input {
+        type filter hook input priority 20; policy drop;
+        udp dport 53 dnat to 1.1.1.1
+    }
     chain prerouting {
         type nat hook prerouting priority 15; policy accept;
         udp dport 53 dnat to 1.1.1.1