Windows – DNS_PROBE_FINISHED_NXDOMAIN with VPN

networkingvpnwindows 10

Before installing VirtualBox or VMware Workstation, my VPN Connection (L2TP/IPSEC PSK) works without any problems. I'm able to reach every Site I want.

But after one of them are installed I getting this error message at several sites with Chrome (Edge and Firefox won't load too, but without giving me an detailed error message), e.g. the whole StackExchange Network.

My Android Phone didn't have this issue (connected to the same VPN, of course)

I tried all the nice things that i found with google.

flushing/renew/release dns (and other crazy command line commands) -> no success
Set DNS-Server manually -> no success
Even after uninstalling -> no success
2 weeks without Vmware/VirtualBox (after complete Windows-Reset) -> SUCCESS

My question now: Is it possible to get back the functionality without to give up on VirtualBox or Vmware? Any Ideas, some magic spells?

Server = QNAP-NAS
Client = Windows 10

Many thanks.

UPDATE #1
Twisty Impersonator ask me to run nslookup on an inaccessible-site. Superuser.com is on of them:

C:\WINDOWS\system32>nslookup -d2 superuser.com
------------
SendRequest(), len 42
    HEADER:
        opcode = QUERY, id = 1, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        1.0.168.192.in-addr.arpa, type = PTR, class = IN

------------
------------
Got answer (91 bytes):
    HEADER:
        opcode = QUERY, id = 1, rcode = NXDOMAIN
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        1.0.168.192.in-addr.arpa, type = PTR, class = IN
    AUTHORITY RECORDS:
    ->  168.192.in-addr.arpa
        type = SOA, class = IN, dlen = 37
        ttl = 1278 (21 mins 18 secs)
        primary name server = localhost
        responsible mail addr = root
        serial  = 1
        refresh = 604800 (7 days)
        retry   = 86400 (1 day)
        expire  = 2419200 (28 days)
        default TTL = 604800 (7 days)

------------
Server:  UnKnown
Address:  192.168.0.1

------------
SendRequest(), len 31
    HEADER:
        opcode = QUERY, id = 2, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        superuser.com, type = A, class = IN

------------
DNS request timed out.
    timeout was 2 seconds.
timeout (2 secs)
Fehler bei SendRequest.
------------
SendRequest(), len 31
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        superuser.com, type = AAAA, class = IN

------------
------------
Got answer (121 bytes):
    HEADER:
        opcode = QUERY, id = 3, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        superuser.com, type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  superuser.com
        type = SOA, class = IN, dlen = 78
        ttl = 265 (4 mins 25 secs)
        primary name server = ns-cloud-d1.googledomains.com
        responsible mail addr = cloud-dns-hostmaster.google.com
        serial  = 1
        refresh = 21600 (6 hours)
        retry   = 3600 (1 hour)
        expire  = 259200 (3 days)
        default TTL = 300 (5 mins)

------------
------------
SendRequest(), len 31
    HEADER:
        opcode = QUERY, id = 4, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        superuser.com, type = A, class = IN

------------
DNS request timed out.
    timeout was 2 seconds.
timeout (2 secs)
Fehler bei SendRequest.
------------
SendRequest(), len 31
    HEADER:
        opcode = QUERY, id = 5, rcode = NOERROR
        header flags:  query, want recursion
        questions = 1,  answers = 0,  authority records = 0,  additional = 0

    QUESTIONS:
        superuser.com, type = AAAA, class = IN

------------
------------
Got answer (121 bytes):
    HEADER:
        opcode = QUERY, id = 5, rcode = NOERROR
        header flags:  response, want recursion, recursion avail.
        questions = 1,  answers = 0,  authority records = 1,  additional = 0

    QUESTIONS:
        superuser.com, type = AAAA, class = IN
    AUTHORITY RECORDS:
    ->  superuser.com
        type = SOA, class = IN, dlen = 78
        ttl = 263 (4 mins 23 secs)
        primary name server = ns-cloud-d1.googledomains.com
        responsible mail addr = cloud-dns-hostmaster.google.com
        serial  = 1
        refresh = 21600 (6 hours)
        retry   = 3600 (1 hour)
        expire  = 259200 (3 days)
        default TTL = 300 (5 mins)

------------
*** Zeitüberschreitung bei Anforderung an UnKnown.

Update 2
Output of ipconfig /all (Client)

Windows-IP-Konfiguration

   Hostname  . . . . . . . . . . . . : PC-Name
   Primäres DNS-Suffix . . . . . . . :
   Knotentyp . . . . . . . . . . . . : Hybrid
   IP-Routing aktiviert  . . . . . . : Nein
   WINS-Proxy aktiviert  . . . . . . : Nein

Ethernet-Adapter Ethernet:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Intel(R) Ethernet Connection I219-V
   Physische Adresse . . . . . . . . : 1C-39-47-98-0E-7D
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja

Ethernet-Adapter DockingStation:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Realtek USB GbE Family Controller
   Physische Adresse . . . . . . . . : 00-E0-4C-12-34-72
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter WLAN:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Intel(R) Dual Band Wireless-AC 7265
   Physische Adresse . . . . . . . . : 10-02-B5-A1-01-30
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja

Drahtlos-LAN-Adapter LAN-Verbindung* 1:

   Medienstatus. . . . . . . . . . . : Medium getrennt
   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Microsoft Wi-Fi Direct Virtual Adapter
   Physische Adresse . . . . . . . . : 10-02-B5-A1-01-31
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja

Ethernet-Adapter VMware Network Adapter VMnet1:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet1
   Physische Adresse . . . . . . . . : 00-50-56-C0-00-01
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::7451:972d:1387:c71b%3(Bevorzugt)
   IPv4-Adresse  . . . . . . . . . . : 192.168.150.1(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Standardgateway . . . . . . . . . :
   DHCPv6-IAID . . . . . . . . . . . : 100683862
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-21-D1-6A-BB-1C-39-47-98-0E-7D
   DNS-Server  . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS über TCP/IP . . . . . . . : Deaktiviert

Ethernet-Adapter VMware Network Adapter VMnet8:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : VMware Virtual Ethernet Adapter for VMnet8
   Physische Adresse . . . . . . . . : 00-50-56-C0-00-08
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::e41e:4322:d30b:524c%7(Bevorzugt)
   IPv4-Adresse  . . . . . . . . . . : 192.168.220.1(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Lease erhalten. . . . . . . . . . : Samstag, 6. Januar 2018 08:17:58
   Lease läuft ab. . . . . . . . . . : Samstag, 6. Januar 2018 17:02:57
   Standardgateway . . . . . . . . . :
   DHCP-Server . . . . . . . . . . . : 192.168.220.254
   DHCPv6-IAID . . . . . . . . . . . : 738218070
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-21-D1-6A-BB-1C-39-47-98-0E-7D
   DNS-Server  . . . . . . . . . . . : fec0:0:0:ffff::1%1
                                       fec0:0:0:ffff::2%1
                                       fec0:0:0:ffff::3%1
   NetBIOS über TCP/IP . . . . . . . : Deaktiviert

PPP-Adapter MyVPN:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : MyVPN
   Physische Adresse . . . . . . . . :
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
   IPv4-Adresse  . . . . . . . . . . : 10.2.0.2(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.255.255.255
   Standardgateway . . . . . . . . . : 0.0.0.0
   DNS-Server  . . . . . . . . . . . : 192.168.0.1
   NetBIOS über TCP/IP . . . . . . . : Deaktiviert

Mobiler Breitbandadapter Mobilfunk:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : HUAWEI Mobile Broadband Module
   Physische Adresse . . . . . . . . : 8C-9A-88-55-59-53
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::b91d:5c86:6ce7:c88e%15(Bevorzugt)
   IPv4-Adresse  . . . . . . . . . . : 10.78.75.185(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.0.0.0
   Standardgateway . . . . . . . . . : 10.78.75.186
   DNS-Server  . . . . . . . . . . . : 62.109.121.17
                                       62.109.121.18
   NetBIOS über TCP/IP . . . . . . . : Aktiviert

Tunneladapter LAN-Verbindung* 12:

   Verbindungsspezifisches DNS-Suffix:
   Beschreibung. . . . . . . . . . . : Microsoft Teredo Tunneling Adapter
   Physische Adresse . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP aktiviert. . . . . . . . . . : Nein
   Autokonfiguration aktiviert . . . : Ja
   IPv6-Adresse. . . . . . . . . . . : 2001:0:9d38:78cf:28bb:225b:f5fd:fffd(Bevorzugt)
   Verbindungslokale IPv6-Adresse  . : fe80::28bb:225b:f5fd:fffd%18(Bevorzugt)
   Standardgateway . . . . . . . . . : ::
   DHCPv6-IAID . . . . . . . . . . . : 301989888
   DHCPv6-Client-DUID. . . . . . . . : 00-01-00-01-21-D1-6A-BB-1C-39-47-98-0E-7D
   NetBIOS über TCP/IP . . . . . . . : Deaktiviert

VMnet1 is the Internal Network (To connect via SSH without a physical network)

VMnet8 is the VMware Bridge

Connecting to the local Network devices via IP (192.168.0.xx) over VPN works fine.

As i mentioned earlier, the other half of the world wide web is reachable.

Best Answer

Your VPN connection is configured with the DNS server 192.168.0.1. As demonstrated by your nslookup query attempt, this DNS server is the first to be queried by your computer. Apparently your computer does not have a working route to this DNS server when your VPN connection is active. This needs to be resolved.

Based on your comment:

i give up on L2TP/IPSEC. Switched to OpenVPN. No DNS related issues. I'm able to browse the (complete) web AND use my local devices at home.

It appears something was not working with your VPN connection and that was preventing you from reaching this DNS server.

Related Question