Never mind, My bad.
I missed a critical setup of choosing the mirrored server.
Now for some reason I can't do a lookup from outside the network the DNS servers are on.
:-(
syslog shows
dns1 named[31920]: client xxx.xxx.xxx.xxx#36234: query (cache) 'www.mydomain.xx.xx/A/IN' denied
|