thanks. a reboot solved the issue. I was puzzled because netstat was showing port 953 was beling listened on, and that was a local (127.0.0.1) access attempt, so firewall is not an issue. I will certainly upgrade bind ASAP