From e4e2a76adb896a2163a34eec616ff3337e469c19 Mon Sep 17 00:00:00 2001
From: Viktor Liu <viktor@netbird.io>
Date: Mon, 25 May 2026 12:57:38 +0200
Subject: [PATCH] Gate DNS forwarder on BlockInbound

---
 client/internal/engine.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/client/internal/engine.go b/client/internal/engine.go
index 3bd0d4621..c391d6b49 100644
--- a/client/internal/engine.go
+++ b/client/internal/engine.go
@@ -2193,7 +2193,7 @@ func (e *Engine) updateDNSForwarder(
 	enabled bool,
 	fwdEntries []*dnsfwd.ForwarderEntry,
 ) {
-	if e.config.DisableServerRoutes {
+	if e.config.DisableServerRoutes || e.config.BlockInbound {
 		return
 	}