diff --git a/client/internal/dns/server.go b/client/internal/dns/server.go
index 62e6f09c945..29b0d5ab39c 100644
--- a/client/internal/dns/server.go
+++ b/client/internal/dns/server.go
@@ -428,6 +428,7 @@ func (s *DefaultServer) buildUpstreamHandlerUpdate(nameServerGroups []*nbdns.Nam
 				return nil, fmt.Errorf("received a nameserver group with an empty domain element")
 			}
 			if !nsGroup.Enabled {
+				handler.disabled = true
 				continue
 			}
 			muxUpdates = append(muxUpdates, muxUpdate{