> > I have a guess, but I haven't tested it yet.  Something between the
> > internet and those two servers ns1/2.obol-net.net is refusing packets
> > with UDP source port 53.
> 
>  If that were the case, than all queries would fail, but an SOA query
>  still works:
> 
>   root/ns1:/ # dig obol-net.net soa
>   ;; ANSWER SECTION:
>   obol-net.net.           1D IN SOA       ns1.obol-net.net.

No, no.  *source* address.  Of packets coming from the *outside*.
It would be a goofy thing to do, but it fits the observations.

Reply via email to