I have two AD/DNS servers, and on the secondary I can't seem to lookup the external site www.iis.se (or any other hostname that their name servers control).
The central firewall at this office allows any any outbound, TCP and UDP. The DNS server has no local firewall nor antivirus. My windows client, located in the same subnet as the DNS server can do the lookup by asking the nameservers that are in control of www.iis.se.
dig NS iis.se
shows
iis.se. 2517 IN NS ns2.nic.se. iis.se. 2517 IN NS ns.nic.se. iis.se. 2517 IN NS ns3.nic.se.
On AD/DNS server:
C:\Users\Administrator>nslookup www.iis.se 212.247.7.228 Server: UnKnown Address: 212.247.7.228 Name: www.iis.se Addresses: 2a00:801:f0:80::80 212.247.7.221 C:\Users\Administrator>nslookup www.iis.se 194.17.45.54 Server: UnKnown Address: 194.17.45.54 Name: www.iis.se Addresses: 2a00:801:f0:80::80 212.247.7.221 C:\Users\Administrator>nslookup www.iis.se 212.247.3.83 Server: UnKnown Address: 212.247.3.83 Name: www.iis.se Addresses: 2a00:801:f0:80::80 212.247.7.221
And still:
C:\Users\administrator>nslookup www.iis.se Server: UnKnown Address: 127.0.0.1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to UnKnown timed-out
Edit 3
C:\Users\Administrator>ipconfig /all Windows IP Configuration DHCP Enabled. . . . . . . . . . . : No Autoconfiguration Enabled . . . . : Yes IPv4 Address. . . . . . . . . . . : 10.180.3.15(Preferred) Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.180.3.254 DNS Servers . . . . . . . . . . . : 10.180.3.15 10.10.10.19 C:\Users\Administrator>nslookup www.test.se Server: UnKnown Address: 10.180.3.15 Non-authoritative answer: Name: www.test.se Address: 216.8.179.24 C:\Users\Administrator>nslookup www.iis.se 127.0.0.1 Server: localhost Address: 127.0.0.1 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to localhost timed-out C:\Users\Administrator>nslookup www.iis.se 10.180.3.15 Server: UnKnown Address: 10.180.3.15 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to UnKnown timed-out C:\Users\Administrator>nslookup www.iis.se 10.10.10.19 Server: ds-1.company.com Address: 10.10.10.19 Non-authoritative answer: Name: www.iis.se Addresses: 2a00:801:f0:80::80 212.247.7.221