From e2b1ed295c6a17b4d49ff01231ef222313d4cece Mon Sep 17 00:00:00 2001
From: Peter Vacho <pvacho@monetplus.cz>
Date: Tue, 10 Mar 2026 15:46:03 +0100
Subject: [PATCH] Disable link-local name resolution by default

---
 root/etc/NetworkManager/conf.d/llmnr-mdns.conf | 8 ++++++++
 1 file changed, 8 insertions(+)
 create mode 100644 root/etc/NetworkManager/conf.d/llmnr-mdns.conf

diff --git a/root/etc/NetworkManager/conf.d/llmnr-mdns.conf b/root/etc/NetworkManager/conf.d/llmnr-mdns.conf
new file mode 100644
index 0000000..676b15b
--- /dev/null
+++ b/root/etc/NetworkManager/conf.d/llmnr-mdns.conf
@@ -0,0 +1,8 @@
+# Disable link-local name resolution protocols.
+#
+# LLMNR and mDNS allow devices on the same LAN to resolve hostnames
+# without DNS. They are rarely needed on managed networks and can
+# expose system information to the local network.
+[connection]
+connection.llmnr=0
+connection.mdns=0