DNS 설정문제.--답답합니다.

안녕하세요. 읽어 주셔서 감사하구, 아시는 분 답변 주시면 감사하겠습니다.

dns서버를 하나세팅했습니다.
이름은 codac-dns1.dev.org (10.128.0.8)입니다.
이서버에서는 dns로 보면 외부로 나가는게 잘보입니다.

이 dns 서버에는 3개의 네밈서버를 찾도록 설정되어있습니다.
/etc/resolv.conf
1차 : 10.128.0.8는 사설 dns입니다.
2차 : 10.128.0.9는 사설 dns입니다.
3차 : 10.10.240.10는 외부로 볼수 있는 dns서버입니다.

[root@xxx-dns1 named]# dig goodle.com
;; Got referral reply from 10.128.0.8, trying next server

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> goodle.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41262
;; flags: qr aa; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0

;; QUESTION SECTION:
;goodle.com. IN A

;; ANSWER SECTION:
goodle.com. 3600 IN A 216.34.131.135

;; AUTHORITY SECTION:
goodle.com. 86400 IN NS ns2.fabulous.com.
goodle.com. 86400 IN NS ns1.fabulous.com.

;; Query time: 232 msec
;; SERVER: 10.10.240.10#53(10.10.240.10)
;; WHEN: Thu Jul 29 20:40:19 2010
;; MSG SIZE rcvd: 89

이렇게 설정을 다른 서버 B(ip 10.128.0.8)에 세팅 했습니다.
/etc/reslov.conf
1차 dns : 제가 구성한것 10.128.0.8
2차 dns : 제가 구성한것 10.128.0.9
3차 dns : 10.10.240.10 회사 공식 dns서버

설정은 dns서버와 동일하게 네트웍 설정을 했습니다.

그런 다음에 dig goodle.com명령어를 날리면
[root@codac-dhcp1 /]# dig google.com

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> google.com
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: REFUSED, id: 11322
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com. IN A

;; Query time: 3 msec
;; SERVER: 10.128.0.8#53(10.128.0.8)
;; WHEN: Thu Jul 29 22:47:19 2010
;; MSG SIZE rcvd: 28

Refuse 됩니다.
그리고 아래와 같은 에러 메세지가 1차 dns서버에 보입니다.
Jul 29 20:47:19 codac-dns1 named[10156]: client 10.128.0.6#58514: view internal: query (cache) 'google.com/A/IN' denied

왜 똑같은 설정인데 dns서버에서 google.com찾으면 되고 클라이언트에서 dns서버를 설정한것은 안될까요?

아래는 named.conf파일입니다.
어떤 조인이라도 감사히 받겠습니다.

결론은 서버 A(dns설치된곳)에서는 외부가 다보이는데
서버 B(dns 보도록 된것)에서는 외부가 다 안보일까요?
//
// named.caching-nameserver.conf
//
// Provided by Red Hat caching-nameserver package to configure the
// ISC BIND named(8) DNS server as a caching only nameserver
// (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// DO NOT EDIT THIS FILE - use system-config-bind or an editor
// to create named.conf - edits to this file will be lost on
// caching-nameserver package upgrade.
//
acl codac-sys-subnet { 10.128.0.0/24; };
acl codac-net-subnet { 10.128.1.0/24; };
acl codac-op-subnet { 10.128.2.0/24; };
acl codac-sub1-subnet { 10.130.1.0/24; };
acl codac-devnet-subnet { 10.201.1.0/24; };
acl codac-ext-subnet { 10.201.2.0/24; };
acl codac-old { 192.168.124.0/24; };

options {
listen-on port 53 { 127.0.0.1;10.128.0.8; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";

// Those options should be used carefully because they disable port
// randomization
// query-source port 53;
// query-source-v6 port 53;

// allow-query { localhost; codac-sys-subnet; codac-net-subnet; codac-op-subnet; codac-devnet-subnet; codac-ext-subnet; codac-sub1-subnet; codac-old; };
// allow-query-cache { localhost; codac-sys-subnet; codac-net-subnet; codac-op-subnet; codac-devnet-subnet; codac-ext-subnet; codac-sub1-subnet; codac-old; ; };
allow-query { any; localhost; localnets; };
// allow-query-cache { any; };
//allow-tranfer { any; };
//forwarders { 10.10.240.10; 10.10.241.10; }

};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

view localhost_resolver {

match-clients { any; };
match-destinations { any; };

// match-clients { localhost; codac-sys-subnet; codac-net-subnet; codac-op-subnet; codac-devnet-subnet; codac-ext-subnet; codac-sub1-subnet; codac-old; };
// match-destinations { localhost; codac-sys-subnet; codac-net-subnet; codac-op-subnet; codac-devnet-subnet; codac-ext-subnet; codac-sub1-subnet; codac-old; };
recursion no;
//allow-recursion { any; };
include "/etc/named.rfc1912.zones";

zone "codac-dev.org" {
type master;
file "codac.development.zone";
allow-update { none; };
};

zone "0.128.10.in-addr.arpa" {
type master;
file "rev.10.128.0";
allow-update { none; };
};

zone "1.128.10.in-addr.arpa" {
type master;
file "rev.codac-net";
};

zone "2.128.10.in-addr.arpa" {
type master;
file "rev.codac-op";
};

zone "1.201.10.in-addr.arpa" {
type master;
file "rev.codac-devnet";
};

zone "2.201.10.in-addr.arpa" {
type master;
file "rev.codac-ext";
};

zone "1.130.10.in-addr.arpa" {
type master;
file "rev.codac-sub1";
};

};
//jkey ddns_key
//j{
// algorithm hmac-md5;
// secret "use /usr/sbin/dns-keygen to generate TSIG keys";
// secret "I2gEE0hK96eHAmVU2fh0mWxf6WiQEdYeqheLCQ5IYKBukDQnvqmj0riqOvo7";
};