nixCraft

I've been trying to figure this out for a couple weeks now, and I'm coming up blank.

I have a meta-switch configured on a private network, and a DNS server (running Redhat Enterprise Server 5.2) with a public address. The meta-switch has the IP 10.0.0.90, and my acl in named.conf looks like this:

acl internal {
...;
10.0.0.0/24;
};

with internal networks allowed to recurse and query.

I am able to ping the nameserver from the meta-switch, and vice-versa, so the routes should be in place.

In order to see if the traffic reaches the nameserver, I run the following command:

tcpdump -A 'udp and (src 10.0.0.90 or dst 10.0.0.90) and port 53'

and try to resolve names. No packets are ever received. However, wireshark shows the traffic as being rejected by the nameserver. There are no entries in /etc/hosts.deny.

The nameserver is functioning for 99% of the devices pointed at it, including several other machines on that private network. Does anyone have suggestions on different packet sniffs I can try, or a service/file that needs to be reconfigured?