Problem with DNS services within my laptop running Windows 7 Pro

2xg I noticed this in post #7 could it be a problem. To the best of my memory this is done by a corporation or a government agency.

I am behind multiple Firewalls

2xg is the expert so I will go back to watching.

Suranjit said:

Every time I start my computer (either Restart/Wake from Sleep or network restarted), I am unable to use any URL. I can not browse any sites for ~30 minutes and these errors show up in the event viewer. Then eventually after that time, it starts to work.
During that time, I am unable to ping any domain name (google.com etc.) but can ping any public IP (8.8.8.8 for example).

Layback Bear said:

2xg I noticed this in post #7 could it be a problem. To the best of my memory this is done by a corporation or a government agency.

I am behind multiple Firewalls

2xg is the expert so I will go back to watching.

Are the firewalls running NAT at all? Are they performing stateful monitoring of traffic or are there any manually configured policies in place?

When you place DNS in the mix it can cause issues.

If you're connected via a domain your primary DNS server should be pointing to the domain controller... I would then consider looking at whether the issue is with regards to how the domain controller forwards DNS requests out to public DNS servers.

Just my input,
Josh :)

@ Suranjit - you have a complex issue and a bit confusing to us. Please help us clarify:
In Post# 4, I've asked..... "I'm assuming that this issue is occurring in a business network? Are you the Network Admin?"

We all think that the DNS configuration is probably at fault. How is it configured? Thru a Server, Router or a Firewall device? Do you maintain a Server as well?

Just need to confirm your statement here:
"Actually I am not logged into any domain"

Do you have any spare computer from your remote location and see if you can replicate the issue? We need to know if the issue is coming from only one computer and others are not affected.

Do you work as a Consultant?
"However, I am behind a firewall which I maintain and made sure it's not causing any issues. I have correct dns setting in there too. Same problem happens when I connected to home wireless network!"

@Lady Back Bear....
"2xg is the expert so I will go back to watching."

We all await for another update.

Suranjit is this a customers computer that you are working on in behalf for Fortinet?

From post # 14

- I am working for a firewall vendor, Fortinet

Suranjit said:

@Shadowjk:
- Yes, We have NAT enabled in those firewalls but I don't see any traffic to the first firewall (used wireshark and firewall's generic packet capture but for any domain, there is no traffic. However, I can see ICMP packets when pinging any IP address at that time) when I start pinging to any URL during that time. It seems that the traffic is never leaving the computer. Also, I am not connected via any domain controller.

@2xg:
- I am working for a firewall vendor, Fortinet and from my understanding and troubleshooting it seems that something within my computer causing this issue. To prove this point, I have configured Access Point in the firewall and then connected my computer there. I am still having same issue. However when one of my colleague joined that SSID (and no other connection, either wired or wireless in that laptop), he is able to browse to any website with URL without any issues.

Other than the system logs (events), is there any other debugging or troubleshooting I can do to find out why DNS is not working in my Windows 7 Pro x64 machine? Currently, I have manually configured the DNS as 8.8.8.8 and 8.8.4.4 now.

During that time, I receive following errors repeatedly (mostly for Dnscache service):

A timeout (50000 milliseconds) was reached while waiting for a transaction response from the Dnscache service.
Warning: Name resolution for the name www.kwoff.com timed out after none of the configured DNS servers responded. (DNS Client Events, ID: 1014) - sometimes.
A timeout (50000 milliseconds) was reached while waiting for a transaction response from the LanmanWorkstation service.
A timeout (50000 milliseconds) was reached while waiting for a transaction response from the CryptSvc service.


Thanks,
Suranjit

What does your HOSTS file state? Unless DNS is explicitly blocked your requests should be seen inbound on the firewalls... if not then it may be a routing issue however if it was, your ICMP messages wouldn't be reaching the internet unless some policy based routing is in place (Routing on factors other than destination IP address) ... but highly unlikely and I'm getting ahead of myself.

You may also want to try safe mode with networking to see if a third party application or service is interfering with the DNS requests.

Can you boot the machine into Safe Mode with Networking and test connectivity.

To do so please follow this tutorial (OPTION ONE ONLY) - Safe Mode

   Note

Please replace all references of Safe Mode with Safe Mode with Networking. This will help to see if there is any third party application causing issues.

PeaB4YouGo said:

Check the article here and see if it applies to you (and, I suppose, your neighbors).


(Told ya, the internet is full)

The internet routing table routes based on IP addresses and if it was an issue the pings wouldn't return. DNS is an application layer protocol and runs on top of IP (UDP port 53) Should the pings destined to a public IP address have failed then this would indicate a routing problem...

I'm going to drop back on this one so the OP isn't overwhelmed with responses :)

Best of Luck,
Josh!

In addition, I'd recommend a virus and malware scan since you weren't able to replicate your issue using a different computer. You may either use Malwarebytes or SuperAntiSpyware Free edition.

Also, check for any proxy settings in your browser and see if it has been hijacked, you may disable the proxy.

I'd also suggest to try using a different browser.

Another thing, create a new User Profile from your computer, use the new User Account and see if the issue persist.