Our current setup is that each remote site has a Netware 6 DNS server
which is Authoritative for its zone. remotesight.cca.com.

At corporate, we have have a Netware 6 DNS server that is authoritative
for cca.com.

The remote sites are set to forward to the corporate DNS server. We are
seeing some of the remote servers going out to the internet for DNS

Is this how it should work by design or should the corporate server be
handling all external lookups?

Is there a better way of designing this structure?