We performed a controlled shutdown of the secondary name server ns2 due to a detected inconsistency in replicated DNS zones. We are currently investigating why axfr zone transfer is not working as expected.
All dns zones are still resolveable through the primary nameserver ns1.