I've used the auto-installation located at www-howtoforge-com/ispconfig-autoinstall-debian-ubuntu and successfully installed ISPConfig. nslookup testdomain.com ns.my-dns.com returns fine with the following... Server: ns.my-dns.com Address: 172.28.201.228#53 Non-authoritative answer: Name: testdomain.com Address: 27.54.57.213 However, when I queried from my mobile phone, it returns: Query refused ISPConfig was installed on Debian with a fixed LAN IP of 172.28.201.228 and has Internet access via 172.28.201.99(NAT) A virtual IP was set at Fortigate firewall(172.28.201.99) for port-forward TCP & UDP 53 to 172.28.201.228. I believe the firewall an passed the traffic as I turned of the ISConfig instance and received expected time-outs when querying. Are there more ports that needs to be forwarded?
Double check the zone you created using this guide: https://www.howtoforge.com/tutorial/setting-up-your-own-name-service-with-ispconfig/ Especially take care that you created A-Records for the NS-Records when the NS-Records are subdomains of the same zone, and also double check that all qualified domain names end with a dot. Only short names have no dot at the end.
I've doubled check the DNS records were duly completed and nslookup on the LAN verified that. The issue is resolved after enabling NAT at Fortigate firewall. Thanks for your suggestion, Till.