Slow External Name server

[RadiclDreamer]

We run our own external ns servers and I am in the process of moving them from older 2000 servers to newer ones running 2008 std server. I have staged the server and added the dns role, its a stand alone server that is NOT part of my domain and will serve records for servera.domain.org type things. Currently on my ASA I have UDP and TCP domain services enabled and sent to the correct address. The problem comes in doing an NSLOOKUP as a test, it times out 2 times @ 2 seconds each and then resolves. What could be causing this issue?

Its not a hard hit box at all, maybe 15 records total on it

Also, the only parameters I changed were to add each of the hosts.

 

[RadiclDreamer]

Just found out if I add another "." to the end of the name it resolves instantly so i know ive configured something wrong on the name server so to clarify

server.domain.org = 2 time outs then a hit
server.domain.org. = instant success

 

[RadiclDreamer]

Disabling recursion fixes the issue

 

[Nothinman]

Makes sense since adding a . to the end tells it that hostname is the final, fully qualified name. So there's an issue with that server connecting to the forwarders you configured or the root name servers.

 

[RadiclDreamer]

Makes sense since adding a . to the end tells it that hostname is the final, fully qualified name. So there's an issue with that server connecting to the forwarders you configured or the root name servers.

It was the root name servers, I hadnt allowed it to connect out via my ASA