i have very similar problem: can: dig @mywanip subdomain.domain.tld cannot: dig @mywanip domain.tld port forwarding and network is ok, logs are ok... looks like A records cannot be accessed. but zone record is as it has to be.