Why server output from disallowed interface?

[Jonathan de Boyne Pollard]

SA> According to my understanding this is a zone transfer to the
SA> machine shown as the destination address.

Your understanding is wrong, as Peter and Barry have already
pointed out.  They've missed a spot, though.

SA> As shown about, though, I have not permitted the answering of
SA> queries on the interface on which this data is being sent.

What makes you think that controlling where queries are _accepted
from_ (by the front end) has any bearing upon where queries are
_sent to_ (by the back end) ?