config error on my system. it appears that the SLIRP dns forwarder only tries the first entry in resolv.conf, which in my case was not correct. libresolver tries them all in series.