11001: Host not found. Source: DNS error

I was looking for a way to bypass certain website/domains in ISA2004 and came
across KB838708. So I followed and applied it thinking it would work..
However I then started to get Error Code 11001: Host not found!

Error Code: 11001: Host not found
Background: This error indicates that the gateway could not find the IP
address of the website you are trying to access. This is usaually due to a
DNS-related error.
Source: DNS error

I've tried restoring ISA2004 backup and running the CEICW wizard hopeing
this would fix it. But I'm still getting the 11001 error.

I can ping google.com, yahoo.com etc from inside the network. I can also
still access OWA, RWW and push emai but I can't don't seem to be able to
browse any websites without getting 11001 or http:///

I've also noticed this on the links:

http:///?%20google.com

So I tried follow
http://blogs.technet.com/edwalt/arch...27/423305.aspx and turning
off Compression Filter & Caching Compress Content but still getting 11001.

Forgot to mention using Web Proxy on ISA2004 where all clients have ISA
Firewall Client installed as well.

Checking the event logs just before and after I made the stupid ISA2004
change I have this.

In this order:

Event ID: 113
Message: The DNS server could not signal the service "NAT". The error was
1168. There may be interoperability problems between the DNS service and
this service.

Event ID: 3
Message: The DNS server has shutdown.

Event ID: 113
Message: The DNS server could not signal the service "NAT". The error was
1168. There may be interoperability problems between the DNS service and
this service.

Event ID: 2
Message: The DNS server has started.

Event ID: 6702
Message: DNS server has updated its own host (A) records. In order to
ensure that its DS-integrated peer DNS servers are able to replicate with
this server, an attempt was made to update them with the new records through
dynamic update. An error was encountered during this update, the record data
is the error code.

If this DNS server does not have any DS-integrated peers, then this error
should be ignored.

If this DNS server's Active Directory replication partners do not have the
correct IP address(es) for this server, they will be unable to replicate with
it.

To ensure proper replication:
1) Find this server's Active Directory replication partners that run the DNS
server.
2) Open DnsManager and connect in turn to each of the replication partners.
3) On each server, check the host (A record) registration for THIS server.
4) Delete any A records that do NOT correspond to IP addresses of this server.
5) If there are no A records for this server, add at least one A record
corresponding to an address on this server, that the replication partner can
contact. (In other words, if there multiple IP addresses for this DNS
server, add at least one that is on the same network as the Active Directory
DNS server you are updating.)
6) Note, that is not necessary to update EVERY replication partner. It is
only necessary that the records are fixed up on enough replication partners
so that every server that replicates with this server will receive (through
replication) the new data.

Event ID: 2
Message: The DNS server has started.

Also in my DNS => Forwarders =>
DNS domain: All other DNS domains
194.72.9.34 and 194.7.0.114 (BT DNS listed)

I've just run loggin on ISA2004 and here's what I got when trying google.com

Log type: Web Proxy (Forward)
Status: 302 Moved Temporarily
Rule: Allow HTTP/HTTPS requests from ISA Server to specified sites
Source: Local Host ( 192.168.16.2:0)
Destination: External ( 64.4.52.189:80)
Request: GET http://go.microsoft.com/fwlink/?LinkId=74005
Filter information: Req ID: 133ce92b
Protocol: http
User: anonymous

then,

Log type: Web Proxy (Forward)
Status: 11001 No such host is known.
Rule: Allow HTTP/HTTPS requests from ISA Server to selected servers for
connectivity verifiers
Source: Local Host ( 192.168.16.2:0)
Destination: External ( 192.168.16.2:80)
Request: GET http://gateway.2wire.net/xslt?PAGE=HURL08
Filter information: Req ID: 133ce92c
Protocol: http
User: anonymous

From the Allow request it looks like my NIC has got screwed up, but I not
totally sure.

What does bypass mean? If I want to block sites I sign up for and use
opendns.com. Or I make domaain evtries on the server's dns that points
to fake ips.

So you undid step 6 and then did step 7 and it did not revert? I have
had minor issues with ISA that went away after 24 hours. I guess if I
was not using the cache I would not have issues as the server would go
out to serve the request instead of first checking the cache and
serving off of the cache.

I was using OpenDNS, before the weird ISA 11001 error. By bypass I mean
direct access to an external web service we use and not via the Web Proxy or
cache.

No magic 24hr setting has taken hold yet!? :(

What is baffling me is external access, OWA, RWW is working as it should.
But inside the network calling a web page is give me this error headache.

If I turn of Web Proxy I get 'Bad Request URL' and adds s in to the url
https://google.com

When i tried to access the internet after configuring my ISA 2004 i get the following error

Error Code: 11001: Host not found
Background: This error indicates that the gateway could not find the IP
address of the website you are trying to access. This is usaually due to a
DNS-related error.
Source: DNS error

If you are posting here to find an answer to a question, could you please
start a new thread with a single question? This one is very difficult to
follow and references threads that are almost two years old.

Yes I agree this is totally confusing. Frederick you should also post
directly to this newsgroup instead of using some 3rd party like