diff --git a/core/src/main/golang/config/defaults.go b/core/src/main/golang/config/defaults.go
index fc16a222..916c6431 100644
--- a/core/src/main/golang/config/defaults.go
+++ b/core/src/main/golang/config/defaults.go
@@ -7,6 +7,10 @@ var (
 		"8.8.8.8",
 		"1.1.1.1",
 	}
+	defaultFallback = []string{
+		"https://1.1.1.1/dns-query",
+		"https://doh.pub/dns-query",
+	}
 	defaultFakeIPFilter = []string{
 		// stun services
 		"+.stun.*.*",
@@ -21,7 +25,7 @@ var (
 		"*.n.n.srv.nintendo.net",
 	}
 	localNetwork = []string{
-		"0.0.0.0/32",
+		"0.0.0.0/8",
 		"127.0.0.0/8",
 	}
 )
diff --git a/core/src/main/golang/config/process.go b/core/src/main/golang/config/process.go
index 877f5f18..3c850a4c 100644
--- a/core/src/main/golang/config/process.go
+++ b/core/src/main/golang/config/process.go
@@ -58,10 +58,10 @@ func patchDns(cfg *config.RawConfig, _ string) error {
 		cfg.DNS.Enable = true
 		cfg.DNS.IPv6 = false
 		cfg.DNS.NameServer = defaultNameServers
-		cfg.DNS.Fallback = []string{}
+		cfg.DNS.Fallback = defaultFallback
 		cfg.DNS.FallbackFilter.GeoIP = false
 		cfg.DNS.FallbackFilter.IPCIDR = localNetwork
-		cfg.DNS.EnhancedMode = dns.FAKEIP
+		cfg.DNS.EnhancedMode = dns.MAPPING
 		cfg.DNS.FakeIPRange = "198.18.0.0/16"
 		cfg.DNS.DefaultNameserver = defaultNameServers
 		cfg.DNS.FakeIPFilter = defaultFakeIPFilter