Well this is *almost* working now. Still missing a bunch of patches from 9.11 that will need to be manually reviewed to determine if they're still needed.
When I say *almost*, it may actually be a configuration change that's required.
If I start the server on 192.168.1.135, any request from 192.168.1.0/24 times out, and named.run shows: