bind-users Digest, Vol 1909, Issue 1

[Abdul Khader]

Make your firewall allows DNS packets > 512 bytes.

In the meantime, do the following.

do dig with "+noedns +bufsize=0"

if the dig with "+noedns +bufsize=0" gives you answer, then add the 
following to named.conf


server 0.0.0.0/0 {
        edns no;
};



This should fix your issue. Once your firewall allows DNS packets > 512, 
you can remove the named.conf entry.

Abdul Khader