I tried the forwarding of 49152-65535 without the sip designation and the problem continued. So I got rid of this range and the DNS is back.
Made a test call - seemed to work. So maybe the SIP thing on port 5060 and 5070 operates a trigger that permits the connection on the higher range ports.