diff --git a/devices/teal/config/etc/systemd/resolved.conf b/devices/teal/config/etc/systemd/resolved.conf
index 8299a8b..6b711ea 100644
--- a/devices/teal/config/etc/systemd/resolved.conf
+++ b/devices/teal/config/etc/systemd/resolved.conf
@@ -21,8 +21,8 @@
 # Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
 # Google:     8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
 # Quad9:      9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
-DNS=192.168.88.231 192.168.88.40
-Domains=~objectbrokers.com
+#DNS=192.168.88.231 192.168.88.40
+#Domains=~objectbrokers.com
 #DNSSEC=no
 #DNSOverTLS=no
 #MulticastDNS=no
diff --git a/devices/teal/config/usr/local/etc/unbound/unbound.conf b/devices/teal/config/usr/local/etc/unbound/unbound.conf
index 1bf4e2f..cc79d32 100644
--- a/devices/teal/config/usr/local/etc/unbound/unbound.conf
+++ b/devices/teal/config/usr/local/etc/unbound/unbound.conf
@@ -27,16 +27,22 @@
     private-address: 100.64.0.0/10
 
     # addresses from the IP range that are allowed to connect to the resolver
+    # local physical LAN
     access-control: 192.168.88.0/24 allow
     # explicitly allow localhost access
     access-control: 127.0.0.0/8 allow
     # allow Tailnet
     access-control: 100.64.0.0/10 allow
+    # Docker bridge networks (default pool)
+    access-control: 172.16.0.0/12 allow
+    access-control: 192.168.0.0/16 allow
     # uncomment the following line to allow Tailnet IPv6
     # access-control: fd7a:115c:a1e0::/48 allow
 
     access-control-view: 192.168.88.0/24 lan
     access-control-view: 100.64.0.0/10 tailnet
+    access-control-view: 172.16.0.0/12 lan
+    access-control-view: 192.168.0.0/16 lan
     access-control-view: 127.0.0.0/8 lan
     
     do-ip4: yes