diff --git a/thelounge/networkpolicy.yaml b/thelounge/networkpolicy.yaml
index 3d95c03..30c5a90 100644
--- a/thelounge/networkpolicy.yaml
+++ b/thelounge/networkpolicy.yaml
@@ -21,13 +21,24 @@ spec:
               kubernetes.io/metadata.name: istio-system
 
   egress:
-    # namespace-local
     - to:
         - namespaceSelector:
             matchLabels:
               kubernetes.io/metadata.name: irc
 
-    # public internet only
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: kube-system
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - protocol: UDP
+          port: 53
+        - protocol: TCP
+          port: 53
+
     - to:
         - ipBlock:
             cidr: 0.0.0.0/0