DNS not resolving for one specific external domain from our domain controllers. All others work.

Question

There is one external domain that used to work, but recently is no longer resolving from our internal network. We use the built-in DNS service from Microsoft Server. Changing the DNS setting on internal systems to an open DNS, such as 1.1.1.1 solves the issue, but this is not ideal as a resolution for our internal systems.

Any ideas what can be checked, why this could be impacting just the Microsoft DNS services? There are no other external domains that seem to be having the issue. Doing packet tracing, they always stop after getting to the internal DNS.

Answer 1

Website or windows domain traffic? For the latter you'll need a VPN between sites.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

It is just browser traffic. The external domain is a public webpage by a third-party, no VPN needed to reach it. It is just traffic on our internal domain, using our Windows Server DNS that has issue to just this one external website.

Answer 3

external domain is a public webpage by a third-party

There's not much you can do other than try using different forwarders. May need to ask the site owner about the issue.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

Nope, we thought for a bit it might have been Defender or Intune but there are no settings to block/filter websites. When running the built in Windows Diagnostics after failure to reach the site, it reports that DNS server are unavailable. This is obviously not true since every other website and resource works with no issues, internal and external. So at this point we are baffles. Traces show the browsers reaching the DNS servers, but then nothing. Packets die.

Answer 5

it reports that DNS server are unavailable

What DNS server? There are many public DNS servers. The site itself may have some sort of registration problem, may need to contact the site owner.

--please don't forget to upvote and Accept as answer if the reply is helpful--