diff --git a/nixos/modules/mail.nix b/nixos/modules/mail.nix
index 71a6559..b8e51f1 100644
--- a/nixos/modules/mail.nix
+++ b/nixos/modules/mail.nix
@@ -98,8 +98,10 @@ in {
             domains = ["fb04184.mathematik.tu-darmstadt.de" "imap.mathebau.de" "smtp.mathebau.de" "mathebau.de"];
             default = true;
           };
+          # HRZ/DFN does spam checking for us and this way we don't need to deal with their possibly broken forwarding setup.
+          spam-filter.enable = false;
+
           # Reevaluate after DKIM and DMARC deployment
-          spam.header.is-spam = "Dummyheader"; # disable moving to spam which would conflict with forwarding
           auth = {
             # TODO check if HRZ and our own VMs conform to these standards and we can validate them strictly
             dkim.verify = "relaxed";