diff --git a/setup/network-checks.sh b/setup/network-checks.sh
index 16c0caa8..887bdd26 100644
--- a/setup/network-checks.sh
+++ b/setup/network-checks.sh
@@ -1,3 +1,7 @@
+# Install the 'host', 'sed', and and 'nc' tools. This script is run before
+# the rest of the system setup so we may not yet have things installed.
+hide_output apt-get -y install bind9-host sed netcat-openbsd
+
 # Stop if the PRIMARY_HOSTNAME is listed in the Spamhaus Domain Block List.
 # The user might have chosen a name that was previously in use by a spammer
 # and will not be able to reliably send mail. Do this after any automatic
diff --git a/setup/system.sh b/setup/system.sh
index fed23b00..9432ea87 100755
--- a/setup/system.sh
+++ b/setup/system.sh
@@ -16,7 +16,7 @@ hide_output apt-get -y upgrade
 #   	fail2ban: scans log files for repeated failed login attempts and blocks the remote IP at the firewall
 
 apt_install python3 python3-pip \
-	wget curl bind9-host \
+	wget curl \
 	haveged unattended-upgrades ntp fail2ban
 
 # Allow apt to install system updates automatically every day.