DNS external nslookup

Hi all

I recently installed a 3rd Domain Controller in my environment with windows 2k3 SP2. During the install and DCPROMO I used one of my existing DNS servers. After the install I gave the server an static IP address and pointed it to itself for the DNS and our other existing DNS server under TCP/IP properties.
I then installed DNS server with ADI which works internally but I cannot do an nslookup to any external sites such as www.google.co.uk as it returns with following error:

Default Server:  server.mydomain.local

Server:  server.mydomain.local

DNS request timed out.
    timeout was 2 seconds.
*** Request to server.mydomain.local timed-out

Please also note that my primary DNS server is a windows 2000 DC. My intension are to transfer all FSMO roles from the 2000 DC to the new DC once the DNS side is working properly.

can someone please help.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris DentPowerShell DeveloperCommented:

Do you allow outbound access from that server on Port 53 UDP?

Have you configured Forwarders or are you using Root Hints (the default)?


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Maybe you have a firewall that is blocking port 53 udp/tcp

Chris dent is right, you need to configure forwarders to your ISPs dns servers or failing that to Open DNS's servers on and
paul_at_workAuthor Commented:
Cheers omarfarid and Chris It was our firewall causing all the issues. Apparently this was our old email server on the same IP address and we had an old SMTP rule on that IP address to go out only.
Chris DentPowerShell DeveloperCommented:

Excellent, glad you found it :)

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.