title: Issues with DNS lookup on BIND wildcard subdomain
body: <p>There's tutorials galore out there, but I'm having a hard time getting BIND to provide local network DNS lookup.</p>
  
  <p>Aims:</p>
  
  <ul>
  <li>Requests can be made from anywhere on the local network. (I haven't included any <code>listen on</code> statements, so this should be covered - I think!)</li>
  <li><code>*.demo</code> requests should go to <code>192.168.0.64</code></li>
  <li>Anything else should be forwarded to google's <code>8.8.8.8</code> and <code>8.8.4.4</code></li>
  </ul>
  
  <p>Here's my config:</p>
  
  <pre><code># /etc/named.conf
  options {
    directory "/var/named";
    # Hide version string for security
    version "not currently available";
  
    # Forward all unknown DNS queries to the Google Public DNS. (Does it?)
    forwarders { 8.8.8.8; 8.8.4.4; };
  
    dnssec-validation auto;
  
    auth-nxdomain no;    # conform to RFC1035
    listen-on-v6 { any; };
  };
  
  zone "demo." IN {
    type master;
    file "zone.demo";
  };
  </code></pre>
  
  <p>And the zone file:</p>
  
  <pre><code>; /var/named/zone.demo
  $ORIGIN demo.
  $TTL 1D
  @ IN SOA demo. hostmaster (
                            201312041 ; serial
                            8H        ; refresh
                            4H        ; retry
                            4W        ; expire
                            1D )      ; minimum
  
  *. IN  A  192.168.0.64
  </code></pre>
  
  <p>I then run <code>named-checkconf</code> (no output) and <code>named -f</code> (which blocks - all looks well!)</p>
  
  <p>To check that the server is doing what I expect, I run dig:</p>
  
  <pre><code>$ dig @127.0.0.1 A test.demo
  
  ; &lt;&lt;&gt;&gt; DiG 9.8.3-P1 &lt;&lt;&gt;&gt; @127.0.0.1 test.demo
  ; (1 server found)
  ;; global options: +cmd
  ;; connection timed out; no servers could be reached
  </code></pre>
  
  <p>Any ideas as to what I'm doing wrong here?</p>