diff --git a/package/lean/luci-app-sfe/root/etc/config/sfe b/package/lean/luci-app-sfe/root/etc/config/sfe
index b48624ca65..f1ebd3995d 100644
--- a/package/lean/luci-app-sfe/root/etc/config/sfe
+++ b/package/lean/luci-app-sfe/root/etc/config/sfe
@@ -3,6 +3,7 @@ config sfe
 	option ipv6 '0'
 	option wifi '0'
 	option bbr '0'
+	option filter_aaaa '1'
 	option dns '0'
 	option dnscache_enable '1'
 	option dns_server '114.114.114.114,114.114.115.115,223.5.5.5,223.6.6.6,180.76.76.76,119.29.29.29,119.28.28.28,1.2.4.8,210.2.4.8'
diff --git a/package/lean/luci-app-sfe/root/etc/init.d/sfe b/package/lean/luci-app-sfe/root/etc/init.d/sfe
index b2579a8b7d..bb787af93f 100755
--- a/package/lean/luci-app-sfe/root/etc/init.d/sfe
+++ b/package/lean/luci-app-sfe/root/etc/init.d/sfe
@@ -224,13 +224,6 @@ start_service() {
 	dns=$(uci get sfe.config.dns 2>/dev/null)
 	dnscache_enable=$(uci get sfe.config.dnscache_enable 2>/dev/null)
 	bbr=$(uci get sfe.config.bbr 2>/dev/null)
-	aaaa=$(uci get sfe.config.filter_aaaa 2>/dev/null)
-	if [ $aaaa -eq 1 ];  then
-		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf
-		echo "filter-aaaa" >> /etc/dnsmasq.conf
-	else
-		sed -i '/filter-aaaa/d' /etc/dnsmasq.conf	
-	fi
   
 	if [ $enable -eq 1 ]; then
 		! (lsmod | grep fast_classifier >/dev/null) && (modprobe fast_classifier)
@@ -277,6 +270,9 @@ start_service() {
 		sysctl -w net.ipv4.tcp_congestion_control=cubic
 	fi
 
+	uci set dhcp.@dnsmasq[0].filter_aaaa=$(uci get sfe.@sfe[0].filter_aaaa)
+	uci commit dhcp
+
 	if [ "$DNSMASQ_RESTART" = N ]; then
 		/etc/init.d/dnsmasq restart
 	fi