Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'd like to install on Ubuntu 12.04 a DNS server using BIND9. As a first step, I'd just like to configure it as a forwarder for my box only. This is what I do:

  1. I deactivate dnsmasq editing /etc/NetworkManager/NetworkManager.conf by commenting the dns=dnsmasq line. Before, the /etc/resolv.conf file contained a nameserver line, and now there is a nameserver line (my actual DNS server working in a VirtualBox environment). I think it's right, and name resolution (using dig) still works.

  2. I download BIND9 and the suggested packages with sudo apt-get install bind9 bind9utils bind9-doc

  3. In /etc/bind/named.conf.options I edit the

    // forwarders {
    // };

    block with the

     forwarders {


  4. In /etc/dhcp/dhclient.conf I de-comment the #prepend domain-name-servers; line; using DHCP for my network interface, this allows to have nameserver as first line on /etc/resolv.conf; if I had a static configuration, I would just add a dns-nameservers line in /etc/network/interfaces.

  5. Now I restart all services (resolvconf, dhclient, bind9).

Well, from this point nothing works. Using Wireshark I can see a lot of DNS queries to/from and also to/from root-servers, but dig continues to fail with status: SERVFAIL.


share|improve this question
How are you invoking dig? Do you have similar results with nslookup? –  Kenny Rasschaert Nov 20 '12 at 15:01
If I simply use, for example, dig www.amazon.com I obtain SERVFAIL. If I use dig @ www.amazon.com I obtain the correct answer. If I use nslookup I obtain SERVFAIL. –  JustTrying Nov 20 '12 at 15:21
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.