I have a box running pfsense as my main local firewall. Behind it I have a Netgear Nighhawk doing port forwarding for some VPNs we need, and past that the Comcast modem. We just changed providers, the old modem was in bridge mode, this one can't do static IPs in bridge, so it's in what they call pass through, which is just DHCP and firewall disabled.
The weird behavior is, on my domain local clients will time out when trying to go to a new domain, then about a minute later it'll resolve and work fine.
According to ipconfig, the local clients correctly see the pfsense box as both gateway and DNS host. But if I do an nslookup from a lan client I get "*** routername can't find domain: Server failed". But doing a DNS lookup from the pfsense diagnostics works fine. The only unexpected thing I see there is that the first result is the WAN IP,...