named as security violator?

[Michael Schroeder]

The network of IRIS 4Ds I administer is not connected to the Internet but we 
want to use gethostbyname.  I have read the BIND Name Server section of the 
manual and all associated reference manual pages.  All the configuration
files I have constructed "look" like those in the manual.  But when I do
nslookup from a client it tells me
	*** machine-b can't find machine-a: No response from server
where machine-b is the client and machine-a is the server or any other machine.
Yes the client has a resolv.conf in /usr/etc/named.d. 

named really is running on the server.  

We are running yp.  I have ypserv running with the -i option. 

Another symptom is that anyone logging in on the console of machine-a (the
one running named) gets a pop-up button or banner that says 
	Network Security Violation
	address of machine-a

The security violation goes away as soon as I do /etc/chkconfig named off and
reboot.

What am I doing wrong?

Thanks
mike