server timeout on a lookup but zone transfers are OK?

[Michael Mullins]

I found the answer
..
Router access-lists "were"  blocking the lookups but letting in zone
transfers.

Odd though that lookups worked from just a few remote hosts.


"Michael Mullins" <m.mullins at securitynetuk.com> wrote in message
news:9tfiui$li9 at pub3.rc.vix.com...
> I recently set up a new secondary server and it appears to work OK from
> - anything on the same subnet
> - some remote hosts
>
> It picks up info from its master server no problem.
>
> And it seems that when testing using host or nslookup a zone transfer
takes
> place.
>
> For example a host -l or an ls in nslookup is fine.  But a lookup for an A
> record hangs up.
>
> I believe this is maybe related to udp being blocked somewhere.
>
> I have checked router access-lists and ipchains configs but everything
looks
> fine.
>
> Any ideas appreciated.
>
>
>
>
>