Slave server -- failed to connect : timed out

[nelteren]

Hello,
I am trying to setup a secundairy dns server. It is not a plesk server but a plain FC4 server with bind 9.3.1 installed

On the slave:
/etc/named.conf

zone "net-products.nl" {
type slave;
file "net-products.nl.zone";
masters {212.204.247.201;};
};

on the master (plesk 8.1.1)
/etc/named.conf

zone "net-products.nl" {
type master;
file "net-products.nl";
allow-transfer {
212.204.247.201;
80.127.69.217;
common-allow-transfer;
};
};
and
acl common-allow-transfer {
80.127.69.217/24;
=================================================
the logs on the slave:

May 29 21:06:25 localhost named[26631]: zone net-products.nl/IN: Transfer started.
May 29 21:12:47 localhost named[26631]: transfer of 'net-products.nl/IN' from 212.204.247.201#53: failed to connect: timed out
May 29 21:12:47 localhost named[26631]: transfer of 'net-products.nl/IN' from 212.204.247.201#53: end of transfer
==================================================
There is a firewall fore the box, but tcp/udp port 53 is allowed from any
When I do a
tcpdump port 53
I see traffic
tcpdump port 53 and host ns2.net-products.nl
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
21:11:49.612687 IP net-products.nl.28560 > ws02.net-products.nl.domain: 47910 [1au] SOA? blaad.nl. (37)
21:11:49.612927 IP ws02.net-products.nl.domain > net-products.nl.28560: 47910* 1/2/3 SOA[|domain]
21:11:50.112935 IP net-products.nl.28560 > ws02.net-products.nl.domain: 44755 [1au] SOA? net-products.nl. (44)
21:11:50.113250 IP ws02.net-products.nl.domain > net-products.nl.28560: 44755* 1/2/3 SOA[|domain]
=====================================================
Q:
Is it possible that rndc must be configured on the slave?
Q:
Is there someone who has is working as I describe?
thanks for helping!