diff --git a/sys/src/9/boot/net.rc b/sys/src/9/boot/net.rc
index 63697d8ff..42ba9f19e 100755
--- a/sys/src/9/boot/net.rc
+++ b/sys/src/9/boot/net.rc
@@ -25,6 +25,13 @@ fn confignet{
 	if(~ $#auth 0)
 		ask auth ' ip is? ' $fs(1)
 
+	# resolve dns names
+	if(test -x /bin/ndb/dnsgetip){
+		for(i in fs auth secstore){
+			$i=`{for(x in $$i) ndb/dnsgetip -a $x}
+		}
+	}
+
 	# set bootstrap authservers for factotum
 	if(! ~ $#auth 0){
 		grep -v '^[ 	]*auth=' /net/ndb >/env/x
diff --git a/sys/src/9/port/bootfs.proto b/sys/src/9/port/bootfs.proto
index 956601c01..535265e71 100644
--- a/sys/src/9/port/bootfs.proto
+++ b/sys/src/9/port/bootfs.proto
@@ -27,6 +27,8 @@ $objtype
 		mntgen
 		mount
 		mv
+		ndb
+			dnsgetip
 		hjfs
 		rc
 		rm