not resolving from some places?

[Karl Auer]

Hi there.

This name resolves from outside our organisation, but not from within
our organisation. It also resolves via our organisation's nameservers
when the query comes from outside.

So:

   from outside, "dig www.atosresearch.eu works.
   from outside, "dig @dns1.ethz.ch www.atosresearch.eu works
   from inside, "dig www.atosresearch.eu" doesn't work.

When it fails I usually get a timeout, sometimes a SERVFAIL after
several seconds.

www.atosresearch.eu is a CNAME pointing to arroyito.atosorigin.es. 

arroyito.atosorigin.es resolves promptly every time, from inside or
outside.

A trace shows the nameservers for atosresearch.eu:

atosresearch.eu.        85851   IN      NS      ns1.atosorigin.es.
atosresearch.eu.        85851   IN      NS      ns2.atosorigin.es.

The nameservers for atosorigin.es are:

atosorigin.es.          86248   IN      NS      ns1.atosorigin.es.
atosorigin.es.          86248   IN      NS      ns2.atosorigin.es.
atosorigin.es.          86248   IN      NS      ineco.nic.es.

Explicit queries to these nameservers (all of them) work - from inside
or outside. Explicit queries to these nameservers (all of them) issued
from a shell while logged on to our nameservers still work. However,
from inside our network, queries going via our nameservers do not work
for atosresearch.eu.

So I'm mystified. I feel it has to have something to do with our
network, but why would just this domain have this particular problem?

Regards, K.

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Karl Auer (kauer at biplane.com.au)                   +61-2-64957160 (h)
http://www.biplane.com.au/~kauer/                  +61-428-957160 (mob)