Why won't BIND accept the zone from the master server?

Question

Domain Name System

Hello everyone and Happy New Year :-)
There is such a situation: DNS zones for 4 domains are configured on Windows Server 2012 which acts as ns1 for all 4 domains. There is a server with debian and Bind, which acts as ns2 for all domains. In Windows, I set up Zone Transfer for all zones, indicated the direct ip of the Linux server. All three zones work well, except for one that I created first. When trying to test, Bind gives the following error:
Testing transfer of slave zone from XX.XX.XX.XX ..
.. from XX.XX.XX.XX : Failed : ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> IN AXFR domain.com @XX.XX.XX.XX ;; global options: +cmd ; transfer failed.
Why does Bind three zones accept zones normally, namely with this problem? All zones on Bind are configured as Slave.

Answer 1

Axfr occurs over the tcp protocol on port 53. You may only have udp open and tcp is closed. check the firewall first.