Ubuntu Server: BIND9 unable to resolve any ".org" or ".info" domain names

Posted on 2012-09-14
Last Modified: 2012-09-19
Greetings Experts,

I am currently experiencing a DNS resolution issue with my Ubuntu 12.04 LTS server with BIND9 installed. This is the first Ubuntu server I've ever set up, so I'm quite a novice when it comes to using and configuring BIND and other DNS-related tools. Previously I was running Windows Server 2008 R2 and not having any DNS issues. After setting up my new Ubuntu server, I've configured BIND9 by following several guides out there on the Internet. Here's my scenario:

BIND9 on this server is configured as "master" for my domain ""
Forwarders to OpenDNS and Comcast name servers are set up in "named.conf.options"
Local Addresses (anything in zone) resolve fine with nslookup and with dig
".com", ".net", and ".edu" TLD addresses resolve fine with nslookup and dig
".org" addresses (such as and return the following error from dig:

dig: couldn't get address for '': not found

When I change my "nameserver" lines in resolv.conf to use OpenDNS ( instead of the local server address (, everything resolves perfectly fine and ".org" addresses load without issue.

System: Ubuntu Server 12.04 LTS 64-bit
Local IP:
Gateway IP:
Preferred forwarder addresses:

Again, the above settings worked without any issue for more than a year with Windows Server 2008 R2, so I know that I must have done something wrong when configuring Ubuntu.

For reference I'm attaching a TXT file with the output of DIG and NSLOOKUP to both and from the server so you can see the different output. Also included in the text is my db.root, named.conf, named.conf.local, and named.conf.default-zones file.

Thanks in advance,

Question by:ayohoff
    LVL 76

    Expert Comment

    The issue based on your data is with dig: couldn't get address for '': not found

    dig +trace .org. NS

    By now the issue might be resolved. Try removing/commenting out the forwarding and see if your server can function as a cache server without relying on forwarders.
    LVL 3

    Author Comment

    Thanks Arnold. I tried commenting out my forwarders and restarting BIND9. I also cleared out the DNS cache using "rndc flush". I still am experiencing the same issue. Tried rebooting the server completely, but still having the same issue. When I do "dig +trace .org. NS" here is what I get:

    # dig +trace .org. NS
    dig: couldn't get address for '': not found


    If I turn off "dnssec-validation" (by setting to "no" instead of "auto"), it WORKS!

    So -- what is DNSSEC Validation, and why won't this work when it's turned on?

    LVL 76

    Accepted Solution

    Dnssec outlined

    You had defined forwarders, but you do not set the forward ( once|only); in the named.conf options section.
    With this your named process will not be performing the sequential request to locate the name servers for each ., .org, and in the hierarchy before querying the name servers from which to ask the IP record.
    LVL 3

    Author Closing Comment

    This answer is exactly what I needed to get my DNS server up and running securely. I really appreciate the help and explanation.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    Note: for this to work properly you need to use a Cross-Over network cable. 1. Connect both servers S1 and S2 on the second network slots respectively. Note that you can use the 1st slots but usually these would be occupied by the Service Provide…
    I. Introduction There's an interesting discussion going on now in an Experts Exchange Group — Attachments with no extension ( This reminded me of questions tha…
    Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
    Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now