diff --git a/root/etc/NetworkManager/conf.d/llmnr-mdns.conf b/root/etc/NetworkManager/conf.d/llmnr-mdns.conf
new file mode 100644
index 0000000..676b15b
--- /dev/null
+++ b/root/etc/NetworkManager/conf.d/llmnr-mdns.conf
@@ -0,0 +1,8 @@
+# Disable link-local name resolution protocols.
+#
+# LLMNR and mDNS allow devices on the same LAN to resolve hostnames
+# without DNS. They are rarely needed on managed networks and can
+# expose system information to the local network.
+[connection]
+connection.llmnr=0
+connection.mdns=0