diff --git a/cfg/named.options.conf b/cfg/named.options.conf
index 971d7e9..de7c722 100644
--- a/cfg/named.options.conf
+++ b/cfg/named.options.conf
@@ -7,7 +7,9 @@ options {
 
     listen-on { any; };    
     listen-on-v6 { ::1; };
-    allow-recursion { 127.0.0.1; ::1;  host.docker.internal; };
+    # hopefully the default docker bridge network
+    # is consistently in 172.17.0.0/24
+    allow-recursion { 127.0.0.1; ::1; 172.17.0.0/24; };
 
 	dnssec-validation yes;
 };