problem with bind911 or 914

[Wojciech Puchar]

>
> Looks to me like either a firewall or policy issue, not BIND.
>
> Back a decade ago, many firewalls defaulted to blocking tcp/53. This was
> based on the unfortunate decision to list the use of tcp/53 as "SHOULD" in
> the RFC instead of "MUST", but this should produce a timeout,not a host
> unreachable. "host unreachable" is should be the result of an ICMP message
> coming back from a router.
no it wasn't any firewall setting but net.inet.tcp.soreceive_stream=1