我在所有计算机上都遇到DNS查找超时的问题。我启用了TMG DNS系统策略，并添加了另一个防火墙策略，以允许从任何地方到任何地方的所有DNS。监视器显示没有拒绝的DNS连接。
DC/DNS/DDHCP/Wins服务器是Windows 2008 R2 64位服务器。DNS有2个外部转发服务器，无法解析和反向查找所有计算机的指针。
以下是ipconfig和dnslookup控制台日志：
C:>ipconfig/all
Host Name . . . . . . . . . . . . : APOLLO
Primary Dns Suffix . . . . . . . : estar.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : estar.com
Ethernet adapter Local Area Connection 4:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Local Area Connection - Virtual Network
Physical Address. . . . . . . . . : 84-2B-2B-00-8F-BF
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c0a8:fe0f%16(Preferred)
Link-local IPv6 Address . . . . . : fe80::7802:18:9370:4669%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.254.15(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : fe80::c0a8:fe0b%16
192.168.254.11
DHCPv6 IAID . . . . . . . . . . . : 293874475
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-1B-27-53-84-2B-2B-00-8F-BF
DNS Servers . . . . . . . . . . . : 192.168.254.15
68.87.68.162
68.87.74.162
Primary WINS Server . . . . . . . : 192.168.254.15
NetBIOS over Tcpip. . . . . . . . : Enabled
C:>nslookup
DNS request timed out.
timeout was 2 seconds.
Default Server: UnKnown
Address: 192.168.254.15
C:>nslookup www.google.com
DNS request timed out.
timeout was 2 seconds.
Server: UnKnown
Address: ::1
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out
网关/ForeFront TMG服务器是一台Windows 2008 R2 64位服务器。以下是ipconfig和dnslookup控制台日志：
C:>ipconfig/all
Host Name . . . . . . . . . . . . : AGUIRRE
Primary Dns Suffix . . . . . . . : estar.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : estar.com
Ethernet adapter Internal NIC:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-1C-23-CD-87-24
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::211c:a611:bba9:6c09%12(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.254.11(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 301997091
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-D8-60-67-00-1C-23-CD-87-22
DNS Servers . . . . . . . . . . . : 192.168.254.15
68.87.68.162
68.87.74.162
Primary WINS Server . . . . . . . : 192.168.254.15
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter External NIC:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client)
Physical Address. . . . . . . . . : 00-1C-23-CD-87-22
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::c574:e9c8:3e05:ab%11(Preferred)
IPv4 Address. . . . . . . . . . . : 70.91.104.193(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.252
Default Gateway . . . . . . . . . : 70.91.104.194
DHCPv6 IAID . . . . . . . . . . . : 234888227
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-17-D8-60-67-00-1C-23-CD-87-22
DNS Servers . . . . . . . . . . . : 192.168.254.15
68.87.68.162
68.87.74.162
NetBIOS over Tcpip. . . . . . . . : Disabled
C: >nslookup
Default Server: apollo.estar.com
Address: 192.168.254.15
C:>nslookup www.google.com
Server: apollo.estar.com
Address: 192.168.254.15
DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to apollo.estar.com timed-out
您是否允许TCP/53和UDP/53对DNS流量进行入站和出站？不确定TMG是否有规则集可以在一个设置中自动允许所有这些，或者是否需要单独指定它们。