diff --git a/src/libs/xpl/dns.c b/src/libs/xpl/dns.c
index 7621375..dd4e6f7 100644
--- a/src/libs/xpl/dns.c
+++ b/src/libs/xpl/dns.c
@@ -389,7 +389,10 @@ _XplDns_Query(const char *domain, XplDns_RecordType type)
 	result->dnssec_authenticated = 0;
 
 	// FIXME: is this re-entrant _everywhere_ ?
-	answer_len = res_query(domain, ns_c_any, type, answer_buffer, 4096);
+	/* DNS mail records are Internet-class data.  ns_c_any is class 255,
+	 * not an instruction to accept any result, and authoritative servers
+	 * are not required to answer MX/A/TXT questions sent with that class. */
+	answer_len = res_query(domain, ns_c_in, type, answer_buffer, 4096);
 
 	if (answer_len < 0) {
 		// didn't get a sensible answer