> you could strace the whole process of shutting down named and see which > process > hangs in which syscall (strace -f -ff -o ...), then we can think further.
Markus noted on IRC that he had fixed this issue - his iptables didn't have an allowance for 'lo', and the BIND init script has an RNDC call that opens a local TCP socket.
