Question : dns_server_failure

Hello,
Whenever a user tries to access http://www.nytimes.com a dns server failure message is displayed:
Network Error (dns_server_failure)
Your request could not be processed because an error occurred contacting the DNS server.  
The DNS server may be temporarily unavailable, or there could be a network problem.  

I have tried doing an nslookup and the below IP is returned:  170.149.173.130
whenever i try to reverse lookup the IP i get back  www.sea1.nytimes.com, and if i try accessing  www.sea1.nytimes.com it all goes through fine.

What Could be causing this? and how to resolve it?

Could the firewall be blocking it because both the WWW Records and the reverse iplookup dont match?

Note if i pass-by the first firewall lever and connect to the DMZ I can browse the site using the same DNS Servers.

Appreciate your help

Answer : dns_server_failure

The entire site fails to load? Or just specific areas?

Everything you have on the client suggests it should work perfectly. DNS resolves and you can open the TCP connection, not really much else to it.

That leaves something acting as a Proxy for the connection (to explain the difference in behaviour) when using the Browser instead of the command line.

Does this occur in all web browsers? You might consider logging the network traffic to see which requests are going where, specifically those that are failing. If the Firewall can't do that a packet sniffer on a client will, WireShark is probably the best bet there (http://www.wireshark.org).

Chris