{"slug":"why-is-resolvconf-being-overwritten","title":"Why is resolv.conf being overwritten?","tags":["tailscale","dns"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Why is resolv.conf being overwritten?\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nTailscale overwrites `/etc/resolv.conf` when\r\n[MagicDNS](https://tailscale.com/docs/features/magicdns) is enabled in the tailnet and\r\n`--accept-dns` is enabled on the machine running Tailscale and there\r\ndoesn't appear to be a DNS manager running on the system.\r\n\r\n## [Common questions](https://tailscale.com/docs/reference/faq/dns-resolv-conf\\#common-questions)\r\n\r\n### [How do I stop tailscaled from overwriting `/etc/resolv.conf`?](https://tailscale.com/docs/reference/faq/dns-resolv-conf\\#how-do-i-stop-tailscaled-from-overwriting-etcresolvconf)\r\n\r\nFor Linux, refer to [Linux DNS](https://tailscale.com/docs/reference/linux-dns). The short summary is\r\nthat you'll have the best experience by using\r\n`systemd-resolved`. Tailscale tries to interoperate with a number of\r\nother DNS managers before resorting to overwriting `/etc/resolv.conf`.\r\n\r\nIf a DNS manager isn't available for your system, or you don't want to run one,\r\nand don't want Tailscale to overwrite `/etc/resolv.conf`, you can either\r\n[disable MagicDNS](https://tailscale.com/docs/features/magicdns) for all devices in your tailnet or\r\nrun `tailscale set --accept-dns=false` to disable MagicDNS on a single device.\r\n\r\nEven if you set `--accept-dns=false`, Tailscale's MagicDNS server\r\nstill replies at `100.100.100.100` (or `fd7a:115c:a1e0::53`), as long\r\nas MagicDNS is enabled in the tailnet. If you'd like to manually\r\nconfigure your DNS configuration, you can point `*.ts.net` queries at\r\n`100.100.100.100`. The [`100.100.100.100`](https://tailscale.com/docs/reference/quad100) resolver runs inside\r\n`tailscaled` on the device and replies authoritatively to Tailscale\r\nDNS names without needing to forward queries out to the network.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n","html":"<h1>Why is resolv.conf being overwritten?</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>Tailscale overwrites <code>/etc/resolv.conf</code> when\r\n<a href=\"https://tailscale.com/docs/features/magicdns\">MagicDNS</a> is enabled in the tailnet and\r\n<code>--accept-dns</code> is enabled on the machine running Tailscale and there\r\ndoesn't appear to be a DNS manager running on the system.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/faq/dns-resolv-conf#common-questions\">Common questions</a></h2>\n<h3><a href=\"https://tailscale.com/docs/reference/faq/dns-resolv-conf#how-do-i-stop-tailscaled-from-overwriting-etcresolvconf\">How do I stop tailscaled from overwriting <code>/etc/resolv.conf</code>?</a></h3>\n<p>For Linux, refer to <a href=\"https://tailscale.com/docs/reference/linux-dns\">Linux DNS</a>. The short summary is\r\nthat you'll have the best experience by using\r\n<code>systemd-resolved</code>. Tailscale tries to interoperate with a number of\r\nother DNS managers before resorting to overwriting <code>/etc/resolv.conf</code>.</p>\n<p>If a DNS manager isn't available for your system, or you don't want to run one,\r\nand don't want Tailscale to overwrite <code>/etc/resolv.conf</code>, you can either\r\n<a href=\"https://tailscale.com/docs/features/magicdns\">disable MagicDNS</a> for all devices in your tailnet or\r\nrun <code>tailscale set --accept-dns=false</code> to disable MagicDNS on a single device.</p>\n<p>Even if you set <code>--accept-dns=false</code>, Tailscale's MagicDNS server\r\nstill replies at <code>100.100.100.100</code> (or <code>fd7a:115c:a1e0::53</code>), as long\r\nas MagicDNS is enabled in the tailnet. If you'd like to manually\r\nconfigure your DNS configuration, you can point <code>*.ts.net</code> queries at\r\n<code>100.100.100.100</code>. The <a href=\"https://tailscale.com/docs/reference/quad100\"><code>100.100.100.100</code></a> resolver runs inside\r\n<code>tailscaled</code> on the device and replies authoritatively to Tailscale\r\nDNS names without needing to forward queries out to the network.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n"}