more of the allow-query issue

[Joe Pruett]

are there any known issues with allow-query getting confused every once in
a while?  i have been checking my logs to make sure i wasn't denying
access to something i want to make public, and every so often it shows
things like:

Jun 14 11:10:29 q7.q7.com named[120]: unapproved query from [204.152.166.151].1827 for "magdalen.com"
Jun 14 17:29:40 q7.q7.com named[120]: unapproved query from [208.205.235.2].53 for "www.bucconeer.worldcon.org"

both of those are domains i serve, and i double checked that they are
queryable from off net.  it's not near a reload and i am the primary, so
it's not doing a zone transfer.  any ideas?