No subject

machine?  If you can, your firewall is leaky, but you should be able to
do DNS as well.

Are zone transfers working perfectly well on the same side of the
firewall?  You don't say this explicitly.

Does the internal master have an RFC 1918 (private internet) address?
In other words, one in one of these ranges:
     10.0.0.0        -   10.255.255.255  (10/8 prefix)
     172.16.0.0      -   172.31.255.255  (172.16/12 prefix)
     192.168.0.0     -   192.168.255.255 (192.168/16 prefix)
If so, you may never be able to make this work, or it may take a lot
more work.

-- 
Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
COSPO/OSIS Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.