"goundhog" <goundhog@discussions.microsoft.com> wrote in message
news:15377E3D-4D28-4CBF-8A72-146FCA0E4346@microsoft.com...
> Hi Herb
>
> Thanks for the reply - interestingly enough - there are NO DNS issues in
> our domain - all name resolution works fine - and users can browse the
> Internet fine
>
> I noticed this issue when I was troubleshooting something else
>
> All the servers point to each other in DNS - but the 2 that can't resolve
> an NSLOOKUP query are behind a different make of firewall
>
> Why would a firewall interfere with NSLookup ?

UDP or TCP 53 requests blocked OR some firewalls limit the max
size of a UDP packet (to 512 bytes IIRC) and cause problems for
DNS server.