diff --git a/roles/unbound/files/unbound.conf b/roles/unbound/files/unbound.conf
index a234ea4..94e0979 100644
--- a/roles/unbound/files/unbound.conf
+++ b/roles/unbound/files/unbound.conf
@@ -13,6 +13,14 @@ server:
   # https://github.com/jodrell/unbound-block-hosts/
   include: /etc/unbound/local-blocking-data.conf
 
+  # RFC1918 networks are private and should not be returned.
+  private-address: 10.0.0.0/8
+  private-address: 172.16.0.0/12
+  private-address: 192.168.0.0/16
+  private-address: 169.254.0.0/16
+  private-address: fd00::/8
+  private-address: fe80::/10
+
   # Define DNS servers to forward queries to.
   forward-zone:
     name: "."