Kerberos doesn’t have to do with that.
Make sure the firewall is not blocking anything.
Take a look at my examples:
I have erased my email and also later on this list there is an A record for my nameservers, for example
ns0 A 10.14.149.1
ns1 A 10.14.149.4
ns2 A 10.14.149.62