diff --git a/pom.xml b/pom.xml
index e2e0e1775d..b26ec1b703 100644
--- a/pom.xml
+++ b/pom.xml
@@ -958,7 +958,7 @@
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
                     <artifactId>maven-enforcer-plugin</artifactId>
-                    <version>3.2.1</version>
+                    <version>3.3.0</version>
                     <configuration>
                         <fail>false</fail>
                         <rules>
@@ -985,10 +985,21 @@
                                 <findAllDuplicates>true</findAllDuplicates>
                             </banDuplicateClasses>
                             <banDuplicatePomDependencyVersions />
-                            <!-- XXX: Enable this rule once it no longer
-                            "downloads the internet". See
-                            https://issues.apache.org/jira/browse/MENFORCER-467.
-                            <banDynamicVersions />-->
+                            <banDynamicVersions>
+                                <!-- XXX: Drop this once the `ignores` section
+                                below works as expected. -->
+                                <allowSnapshots>true</allowSnapshots>
+                                <!-- XXX: It shouldn't be necessary to specify
+                                an empty `excludedScopes` parameter, but
+                                without this an NPE results. See
+                                https://issues.apache.org/jira/browse/MENFORCER-481. -->
+                                <excludedScopes />
+                                <!-- XXX: This doesn't work. See
+                                https://issues.apache.org/jira/browse/MENFORCER-480.
+                                <ignores>
+                                    <ignore>${project.groupId}</ignore>
+                                </ignores> -->
+                            </banDynamicVersions>
                             <dependencyConvergence />
                             <enforceBytecodeVersion>
                                 <maxJdkVersion>${version.jdk}</maxJdkVersion>