Odd firewall and resolver issues

[Chris Bauer]

I'm having a problems with certain domains trying to resolve addresses
for hosts on the mco.edu domain. I have rules set up for DNS traffic
to
talk to the nameservers, however, there are some nameservers I notice
that insist on querying the firewall instead of the nameservers
(ns-ext.vix.com is ns1.accesstoledo.com for instance). I'm not sure why
this is, since
I've never had it referenced in NS or SOA records for the domain.

Any ideas why this would be happening?

-Chris