You need to ensure that Server1 only resolves queries issued from client computers in the same subnet as Server1
You need to configure the DNS system in the Contoso forest to provide name resolution for resources in both forests