I have a problem with bind9 running on Ubuntu Server 12.10. It refuses to resolve the external domain housing.org.uk even though it resolves all other external domains. I can do:

dig housing.org.uk @

and it works fine. If I do:

dig housing.org.uk +trace

it ends with:

housing.org.uk.         172800  IN      NS      b.adns.mdnx.net.
housing.org.uk.         172800  IN      NS      a.adns.mdnx.net.
dig: couldn't get address for 'b.adns.mdnx.net': failure

There are no forwarders and DNS works fine for everything else. Disabling the firewall briefly made no difference. Any ideas?

  • Does your NS record have an A record with it?
    – Nathan C
    Oct 1, 2013 at 14:20
  • Sorry, I don't know what you mean. This is not my domain I'm trying to resolve, it's an outside one.
    – seumasmac
    Oct 1, 2013 at 14:29

1 Answer 1


If bind9 doesn't have recursion turned on you won't be able to resolve outside domain names.

This type of configuration is recommended:

acl "trusted" {;;

 options {
     allow-query { any; };
     allow-recursion { trusted; };
     allow-query-cache { trusted; };

Adjust the ACL to fit your needs. You should not have a public recursive server as this is a Very Bad Thing™.

Reference: https://kb.isc.org/article/AA-00269/0/What-has-changed-in-the-behavior-of-allow-recursion-and-allow-query-cache.html

  • I can resolve outside domain names, just not this one. I tried those settings anyway, but it made no difference.
    – seumasmac
    Oct 1, 2013 at 14:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.