diff --git a/dns/filters.go b/dns/filters.go
index 2751346e..580d5da1 100644
--- a/dns/filters.go
+++ b/dns/filters.go
@@ -42,7 +42,7 @@ func (gf *geoipFilter) Match(ip netip.Addr) bool {
 			return false
 		}
 	}
-	return !geoIPMatcher.Match(ip)
+	return !geoIPMatcher.Match(ip) && !nnip.IsPrivateIP(ip)
 }
 
 type ipnetFilter struct {