What are the requirements for loading secondary zones?

Hello everyone,

I have a server in an isolated DMZ that holds a few DNS zones. I'd like other windows servers to be able to load those zones(I'll call these 'providers').

I've opened up UDP 53 from the other servers to the DMZ. I.E:

• 192.168.1.2 -> 10.12.12.20 -> UDP 53

However, when attempting to load the zone from any server it fails. I can perform a nslookup from the other machines and query entries correctly. So far I have tried:

• Allow the zone on the master to be transferred to any server
• Added the zone on a provider

What I get is this:

Any ideas? I was under the impression that the providers would just pull the information from the master via UDP 53 and be done with it