<!DOCTYPE html><html><head><title></title><style type="text/css">p.MsoNormal,p.MsoNoSpacing{margin:0}</style></head><body><div>On Wed, Dec 7, 2022, at 13:47, Curtis Maurand via Pdns-users wrote:<br></div><blockquote type="cite" id="qt" style=""><div><br></div><div>I just added to the recursor.conf
forward-zones=xyonet.com=192.168.100.30 and that worked. I would
now call this solved.<br></div><div> <br></div></blockquote><div>The most likely cause is that your router/firewall is not configured properly for 'hairpin NAT' and thus the recursor inside the NAT is not able to reach the auth server on its *public* address, only on its *private* address. Using forward-zone is a good solution for this, and for many other problems too.<br></div></body></html>