problem with CNAME's on external caching server thru firewall

[Michael Coxe]

I setup an external caching server, which forwards to internal
servers, to support some systems outside the firewall which
need to perform internal DNS lookups.

The caching server can perform A & PTR lookups fine, but CNAME
lookups fail.

Is there something fundamentally different about a CNAME lookup?

All DNS servers are running bind 9.2.3.
We have port 53/UDP & TCP open thru firewall, etc.

  - michael

-- 
   Michael Coxe, IT
   <mcoxe at opsware.com>