diff --git a/bind/entrypoint.sh b/bind/entrypoint.sh
index a6d3edd..e2949a7 100755
--- a/bind/entrypoint.sh
+++ b/bind/entrypoint.sh
@@ -1,6 +1,7 @@
 #!/bin/sh
 
 # Start DNS server in background right away
+echo '*.ipfs.ipfs.dappnode ipfs.dappnode' > cloaking-rules.txt
 /app/dnscrypt-proxy &
 
 pid=$!
@@ -44,7 +45,9 @@ fi
 
 # Only write to cloaking-rules.txt if both domain and internal_ip are available
 if [ -n "$domain" ] && [ -n "$internal_ip" ]; then
-    echo "$domain $internal_ip" >cloaking-rules.txt
+    # rewrite cloaking-rules.txt
+    echo "$domain $internal_ip" > cloaking-rules.txt
+    echo '*.ipfs.ipfs.dappnode ipfs.dappnode' >> cloaking-rules.txt
 
     kill $pid
     wait $pid
@@ -53,4 +56,4 @@ if [ -n "$domain" ] && [ -n "$internal_ip" ]; then
 else
     touch cloaking-rules.txt
     echo "[ERROR] Missing domain or internal IP. Cloaking rules not updated. Dyndns domain will not be forwarded to internal IP."
-fi
+fi
\ No newline at end of file