Um,,, te falta definir la zona del caché con...
// prime the server with knowledge of the root servers zone "." { type hint; file "/etc/bind/db.root"; }; Y luego la zona localhost para peticiones locales ... zone "localhost" { type master; file "/etc/bind/db.local"; }; Leete el RFC 1912 y otros que explica mucho mejor que hacer...
relacionado con apt :( cual sera el problema ? named.conf.options options { directory "/var/cache/bind"; // If there is a firewall between you and nameservers you want // to talk to, you might need to uncomment the query-source // directive below. Previous versions of BIND always asked // questions using port 53, but BIND 8.1 and later use an unprivileged // port by default. //query-source address * port 53; // If your ISP provided one or more IP addresses for stable // nameservers, you probably want to use them as forwarders. // Uncomment the following block, and insert the addresses replacing // the all-0's placeholder. forwarders { 209.99.224.25; 209.99.224.24; 200.41.128.13; 200.41.128.3; 200.58.112.195; 200.58.112.102; 200.58.112.193; 200.58.112.101; 200.58.116.206 ; 200.58.116.207; 200.41.128.5; 64.27.20.11; }; auth-nxdomain no; # conform to RFC1035 };