BIND-8/9 interface bug? Or is it FreeBSD?

["." at babolo.ru]

> 
>         By the way, something I didn't cover: 64.71.184.190 is our
>         secondary nameserver's WAN IP.  It's private is 10.0.0.2.
That can be the key - if secondary server
request your private master using public IP

>         I'm still wondering why tcpdump isn't catching the I/O...
Your ipfw rules forbid packets
before interface you are looking for.
Just ipfw forward them to another interface to catch them.