GTM: SERVFAIL when looking up Internet hostnames

I need our GTMs to be able to resolve Internet hostnames. I've followed all the required steps, such as setting up '.' has a hint zone, downloading the named.root file, enabling recursion, and even ...