Internal DNS Not resolving some domains

[Rookcr]

Good day.

I have a Windows 2003 DC with DNS installed. It is set as our Primary DNS internally. For the most part everything works great. However I am unable to resolve sites such as download.microsoft.com or liveupdate.symantecliveupdate.com

I have it set to forward all other domains and to timeout after 2 seconds. Any ideas as I get no errors in the logs.

Thanks

 

[technome]

timeout 2 seconds is too short, not the default. Why is it at 2 seconds, if you get a slow or congested DNS server, DNS query will not succeed. Set mine at 10 seconds
Also search enableednsprobes

http://support.microsoft.com/kb/832223

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[Rookcr]

I was just getting ready to post my fix. At this point it was my Pix Firewall. I had the DNS UDP inspect set at 512 bytes. I was dropping many requests that were between 512 and 800 so I bumped the inspect up to 1024 bytes.

Bpj