Thanks. John. Great experience for sharing!
I was glad that I finally found this posting. I followed your instruction:
remove the iptable
and change the nsd.tcl hostname and address to the internal IP address (not 127.0.0.1).
It solved my painful headache which lasted for the past 8 hours.
Thanks you very, very, very much,
Jay