Ahhh, I see I need to add: allow-query { any; }; to my authoritative zones. Thanks it all works now. Chris Maness p.s. So was this a change in the default behavior of BIND over the years? Because I don't think my named.conf has been changed, and this used to work for any hosts.