Ok, running dig (dig +norec version.bind txt chaos @127.0.0.1) on the loopback comes back fine. Running dig on the real IP also works. Running it from another dmz host to the real IP works as well.