windows 2000 trust

I am trying to set up a one-way non-transitive trust between 2 domains in separate forests across a VPN tunnel. I believe i have DNS set up correctly so that each domain can see the other. I can ping each domain controller from the opposite domainusing the host name, but when i try to establish the actual trust relationship i get an error saying that the domain cannot be contacted. I have also read KB article 312003 and those suggestions did not work. Does something need to be done to contact the actual domain contoller for each domain other than entering a zone for the domain in DNS. Forward and reverse lookup zones have been added to each domain for the other domain.