server timeout on a lookup but zone transfers are OK?

[Michael Mullins]

I recently set up a new secondary server and it appears to work OK from
- anything on the same subnet
- some remote hosts

It picks up info from its master server no problem.

And it seems that when testing using host or nslookup a zone transfer takes
place.

For example a host -l or an ls in nslookup is fine.  But a lookup for an A
record hangs up.

I believe this is maybe related to udp being blocked somewhere.

I have checked router access-lists and ipchains configs but everything looks
fine.

Any ideas appreciated.