diff --git a/nix/pkgs/dns-slaves.nix b/nix/pkgs/dns-slaves.nix
index a70e033..c629026 100644
--- a/nix/pkgs/dns-slaves.nix
+++ b/nix/pkgs/dns-slaves.nix
@@ -21,6 +21,7 @@ writeText "named.slave.conf" (
       masters {${mastersStr} };
       file "/var/lib/bind/slave/${name}.zone";
       allow-notify {${mastersStr} };
+      allow-query { all; };
     };
   '') (
     # public zones only