ISPConfig 3 DNS not working for remote domains

[phorce1]

I'm getting Query Status: REFUSED for some reason. Ideas?


Plain dig shows root servers don't show up

ns4:~# dig

; <<>> DiG 9.5.1-P1 <<>>
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 8802
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;.				IN	NS

;; Query time: 0 msec
;; SERVER: 65.170.133.11#53(65.170.133.11)
;; WHEN: Wed Mar 18 10:53:15 2009

dig for google.com gives no answer

ns4:~# dig google.com

; <<>> DiG 9.5.1-P1 <<>> google.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 4673
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;google.com.			IN	A

;; Query time: 0 msec
;; SERVER: 65.170.133.11#53(65.170.133.11)
;; WHEN: Wed Mar 18 10:53:56 2009
;; MSG SIZE  rcvd: 28

dig for one of the domains set up on the MyDNS server returns proper answer

ns4:~# dig sysmatrix.net

; <<>> DiG 9.5.1-P1 <<>> sysmatrix.net
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6895
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;sysmatrix.net.			IN	A

;; ANSWER SECTION:
sysmatrix.net.		38400	IN	A	65.170.133.11

;; AUTHORITY SECTION:
sysmatrix.net.		38400	IN	NS	ns1.sysmatrix.net.
sysmatrix.net.		38400	IN	NS	ns2.sysmatrix.net.
sysmatrix.net.		38400	IN	NS	ns3.sysmatrix.net.

;; ADDITIONAL SECTION:
ns1.sysmatrix.net.	38400	IN	A	65.170.133.21
ns2.sysmatrix.net.	38400	IN	A	65.170.133.41
ns3.sysmatrix.net.	38400	IN	A	65.170.133.54

;; Query time: 1 msec
;; SERVER: 65.170.133.11#53(65.170.133.11)
;; WHEN: Wed Mar 18 10:54:29 2009
;; MSG SIZE  rcvd: 149

;; MSG SIZE rcvd: 17
[/code]

[code]