diff --git a/setup-viirb.sh b/setup-viirb.sh
index 2f8ba82..b8d34ea 100755
--- a/setup-viirb.sh
+++ b/setup-viirb.sh
@@ -225,6 +225,14 @@ uci set dhcp.wifi.interface='wifi'
 uci set dhcp.wifi.ra='server'
 uci set dhcp.wifi.dynamicdhcp='0'
 
+# Fix DNS: make dnsmasq NOT use a resolv.conf
+# so that it only reads from our servers with DNS64 enabled
+uci set dhcp.@dnsmasq[0].noresolv='1'
+
+# Fix DNS: make the OS use the locally provided DNS servers
+# otherwise the VPN tunnel cannot be established
+dhcp.@dnsmasq[0].localuse='0'
+
 
 # VPN / Wireguard
 uci set network.wg0=interface