Do you have forwarders defined under Network > DNS > forwarders? If it is set to "use forwarders assigned by ISP", are there DNS servers being assigned?
Are your internal clients set to pull DNS from the Astaro, or are they going to out for DNS? If they are going out, do you have a packet filter rule to allow UDP 53 out from the LAN?