diff --git a/machines/vueko/configuration.nix b/machines/vueko/configuration.nix
index d599500..69dd758 100644
--- a/machines/vueko/configuration.nix
+++ b/machines/vueko/configuration.nix
@@ -39,6 +39,10 @@ in
 
   system.stateVersion = "20.09";
 
+  # sadly, too many (legitimate) mail servers have broken dnssec on reverse
+  # lookups
+  services.resolved.dnssec = "false";
+
   services.nginx = {
     enable = true;