diff --git a/system/network/avahi.nix b/system/network/avahi.nix
index c885e9c..fe67571 100644
--- a/system/network/avahi.nix
+++ b/system/network/avahi.nix
@@ -3,6 +3,7 @@
   services.avahi = {
     enable = true;
     nssmdns4 = true;
+    denyInterfaces = [ "docker0" "veth*" "virbr*" ];
     publish = {
       enable = true;
       domain = true;