Ok, let's try again. I have named.conf.options set like this in a bionic lxd container: options { directory "/var/cache/bind"; forwarders { 1.1.1.1; }; dnssec-validation auto; auth-nxdomain no; # conform to RFC1035 listen-on { 10.0.100.137; }; };
10.0.100.137 is the container's eth0 address. This works all the time: ubuntu@bionic-bind9:~$ nslookup ubuntu.com - 10.0.100.137 Server: 10.0.100.137 Address: 10.0.100.137#53 Non-authoritative answer: Name: ubuntu.com Address: 91.189.94.40 Same with dnssec set to false. Can you try with dig perhaps? I don't know how to enable debugging in nslookup (-deb or -d2 didn't change anything here). Something like: dig @127.0.0.1 +trace ubuntu.com host also has some debugging available: host -d ubuntu.com 127.0.0.1 <-- or the actual ip where bind is listening I wonder if packets are getting truncated somehow, as you got an answer besides having a status of failure. -- You received this bug notification because you are a member of Ubuntu Server, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/1787739 Title: postfix name lookup failed after dist-upgrade (Aug-2018) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/bind9/+bug/1787739/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs