diff --git a/advanced/01-pihole.conf b/advanced/01-pihole.conf
index 3f4e4bc5..af46e918 100644
--- a/advanced/01-pihole.conf
+++ b/advanced/01-pihole.conf
@@ -46,3 +46,8 @@ log-facility=/var/log/pihole.log
 local-ttl=2
 
 log-async
+
+# If a DHCP client claims that its name is "wpad", ignore that.
+# This fixes a security hole. see CERT Vulnerability VU#598349
+dhcp-name-match=set:wpad-ignore,wpad
+dhcp-ignore-names=tag:wpad-ignore