With reference to one of the questions asked "Which Ports need to be accessible on a Domain Controller for Clients to logon?" I have a aligned issue being faced. Please see the following ports which are opened for client computers before as reference.
TCP: 53 88 135 139 389 80 445 464 636 3268 3269 1024 to 65535
UDP: 88 123 137 138 500 4500 464 389
As we opened these ports, the issue we facing is DNS lookup from client does not work. Eg. we restricted Domain controller only allowed above ports. Then do nslookup from client computer, we cannot get result for some website address like:
www.badiu.com …etc. that means cannot resolve external web addresses.
Let me know if you have other questions.