dig with and without +norec

[Jim Reid]

>>>>> "Ladislav" == Ladislav Vobr <lvobr at ies.etisalat.ae> writes:

    Ladislav> I have issued the dig directly from the server.

    Ladislav> [dxbins1:/]#dig ns af.mil @192.168.8.91

    Ladislav> ;; connection timed out; no servers could be reached

    Ladislav> [dxbins1:/]#dig ns af.mil @192.168.8.91 +norec

    Ladislav> ... referral answer snipped ....

There will probably be a firewall or router in front of 192.168.8.91
that's blocking recursive DNS queries. This would not be unreasonable
if the administrator of 192.168.8.91 didn't want that server to handle
recursive DNS queries.