The DNS server is set as Authoritative. The problem lies with isa. If I change the default gateway of my DNS server to point to a windows2k NAT server, it works fine. I must be missing something in the ISA configuration.