# Force DNS refresh often -- doesn't seem to have performance implications
max-ttl=120
auth-ttl=120

# Use Google DNS, typically very fast!
server=8.8.8.8
server=8.8.4.4

# log it all!
log-queries
log-facility=/var/log/dnsmasq.log
log-async=10

# Prevent bad requests from leaving the lan
domain-needed
bogus-priv

# Block domains from advertisers by redirecting to a blackhole
address=/ads.yahoo.com/127.0.0.1
address=/amazon-adsystem.com/127.0.0.1
address=/data.microsoft.com/127.0.0.1
address=/googleadservices.com/127.0.0.1
address=/googlesyndication.com/127.0.0.1