CentOS - Aug 2008 - VPN traceroute is not consistent/ Bind cannot transfer

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,
I've got this strange thing:
I setup a openvpn link between two openwrts.
NetA: 192.168.2.0/24
NetB: 192.168.0.0/24

In netA there is a mail server + DNS: 192.168.2.44, with domain name
branch.abc.com
In netB there is a mail server + DNS: 192.168.0.44, with domain name abc.com

I setup both DNS server to be a slave server of each other domain.
- From NetA, it is able to 'copy' the abc.com zone from NetB.
But from NetB, it isn't able to copy the branch.abc.com from NetA.
In /var/log/messages, the error is:
mail named[1566]: zone branch.abc.com/IN/external: Transfer started.
mail named[1566]: transfer of 'branch.abc.com/IN' from 192.168.2.44#53:
connected using 192.168.0.44#50125
mail named[1566]: transfer of 'branch.abc.com/IN' from 192.168.2.44#53:
failed while receiving responses: REFUSED
mail named[1566]: transfer of 'branch.abc.com/IN' from 192.168.2.44#53:
end of transfer
mail named[1566]: zone branch.abc.com/IN/internal: refresh: unexpected
rcode (REFUSED) from master 192.168.2.44#53 (source 0.0.0.0#0)

I've put allow-transfer in:
        zone "branch.abc.com" {
                type master;
                allow-transfer { 192.168.0.44; };
                file "branch.abc.com.zone";
        };

Adding to the confusion:
- From NetB, doing a traceroute to 192.168.2.44 result is OK. But, when I
restart named, the traceroute to 192.168.2.44 brings no response. But,
tracerouting to other PC in NetA succeed.
[root at mail ~]# traceroute 192.168.2.136
traceroute to 192.168.2.136 (192.168.2.136), 30 hops max, 40 byte packets
 1  192.168.0.2 (192.168.0.2)  0.630 ms  1.989 ms  2.381 ms
 2  192.168.0.211 (192.168.0.211)  121.073 ms  140.998 ms  160.724 ms
 3  192.168.2.136 (192.168.2.136)  179.393 ms * *
[root at mail ~]# traceroute 192.168.2.44
traceroute to 192.168.2.44 (192.168.2.44), 30 hops max, 40 byte packets
 1  192.168.0.2 (192.168.0.2)  0.976 ms  1.342 ms  1.733 ms
 2  192.168.0.211 (192.168.0.211)  136.118 ms  155.800 ms  175.573 ms
 3  192.168.2.44 (192.168.2.44)  209.216 ms  225.935 ms  245.866 ms
[root at mail ~]# traceroute 192.168.2.44
traceroute to 192.168.2.44 (192.168.2.44), 30 hops max, 40 byte packets
 1  * * *
 2  * * *
 3  * * *


I'm not sure what is causing this, either:
1. Bind configuration error
2. Inconsistent/strangeness in VPN

Any thoughts?
Thank you very much.
- --
Fajar Priyanto | Reg'd Linux User #327841 | Linux tutorial
http://linux2.arinet.org
13:10:54 up 5:02, 2.6.24-18-generic GNU/Linux
Let's use OpenOffice. http://www.openoffice.org
The real challenge of teaching is getting your students motivated to learn.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIra9V8TneBL/L6RoRAo4MAJ4jLoxHD5ZE7bH2m/66fdWkdY73iACeKVmA
qG7636EFa4/4dgQsXpZE+x4=HdQ/
-----END PGP SIGNATURE-----