diff --git a/docs/faq.md b/docs/faq.md
index 362a0d20..0033bf2a 100644
--- a/docs/faq.md
+++ b/docs/faq.md
@@ -8,6 +8,7 @@
 * [Why aren't you using Alpine Linux, OpenBSD, or HardenedBSD?](#why-arent-you-using-alpine-linux-openbsd-or-hardenedbsd)
 * [I deployed an Algo server. Can you update it with new features?](#i-deployed-an-algo-server-can-you-update-it-with-new-features)
 * [Where did the name "Algo" come from?](#where-did-the-name-algo-come-from)
+* [Can DNS filtering be disabled?](#can-dns-filtering-be-disabled)
 
 ## Has Algo been audited?
 
@@ -44,3 +45,7 @@ In the future, we will make it easier for users who want to update their own ser
 ## Where did the name "Algo" come from?
 
 Algo is short for "Al Gore", the **V**ice **P**resident of **N**etworks everywhere for [inventing the Internet](https://www.youtube.com/watch?v=BnFJ8cHAlco).
+
+## Can DNS filtering be disabled?
+
+There is no official way to disable DNS filtering, but there is a workaround [described here](https://github.com/trailofbits/algo/issues/838). SSH to your Algo server (using the 'shell access' command printed upon a successful deployment), edit `/etc/ipsec.conf`, and change `rightdns=172.16.0.1` to `rightdns=8.8.8.8`. Then run `ipsec restart`.