DNS weirdness

[Tyler Aviss]

I have a server setup like the following

server01
DNS1 (resolves some local DNS addresses, forwards to DNS 2)
DNS2 (forward only to 2 other internal NS's I don't control, NS-1 & NS2)

dig or nslookup from DNS2 to NS1/NS2 is quick
dig from DNS1 to DNS2 for an external name tends to time out. Ditto
connections from server01-DNS1-DNS2

A tcpdump (in the slow case) while trying to resolve aol.ca shows seconds
between getting cname results, so that it (usually) times out before
resolving. No iptables rules on DNS2 blocking incoming udp either (and AFAIK
no other fw rules to affect this). The results do make it back, just seconds
too slow when the whole thing should be done in millisecs.

Any ideas?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gtalug.org/pipermail/legacy/attachments/20110217/8308ebd0/attachment.html>