NAT on Windows 2016 seems to block http to the internet

[PeterJ83]

I have a stand alone Windows Server 2016, with DNS,DHCP and NAT but no AD as a VM
Ethernet 2 is the interface to the internet
At the other interface I have a Windows 10 client. From this client I can do
nslookup www.google.dk
and
ping www.google.dk
But when I open my browser, I cannot browse www.google.dk

My config for the server is:

Windows IP Configuration
Host Name . . . . . . . . . . . . : dns1
Primary Dns Suffix . . . . . . . : david.dk
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : david.dk
local
Ethernet adapter Ethernet:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop Adapter
Physical Address. . . . . . . . . : 08-00-27-AF-0B-7F
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::b5c6:ce7c:1423:1e14%10(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.4.1(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :
DHCPv6 IAID . . . . . . . . . . . : 50855975
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-23-6F-0C-48-08-00-27-AF-0B-7F
DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1
fec0:0:0:ffff::2%1
fec0:0:0:ffff::3%1
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Ethernet 2:
Connection-specific DNS Suffix . : local
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Desktop Adapter #2
Physical Address. . . . . . . . . : 08-00-27-D9-0D-47
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::a020:2d0b:ef53:8220%4(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.3.104(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 4. november 2018 10:38:00
Lease Expires . . . . . . . . . . : 5. november 2018 10:38:00
Default Gateway . . . . . . . . . : 192.168.3.1
DHCP Server . . . . . . . . . . . : 192.168.3.1
DHCPv6 IAID . . . . . . . . . . . : 285736999
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-23-6F-0C-48-08-00-27-AF-0B-7F
DNS Servers . . . . . . . . . . . : 192.168.4.1
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Reusable ISATAP Interface {5169AC8D-D2F1-4EF4-BF39-B16237956ECF}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.local:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . : local
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Continue reading...