Thank you for the detailed update and for taking the time to work through all these tests. The good news is that the latest results help narrow the issue down considerably.
At this point, I would not make any further routing changes. The desktop now has the expected directly connected route:
192.168.1.0/24 -> On-link -> 192.168.1.3
And the default route is through:
192.168.0.254 -> 192.168.0.182
This matches the network design we discussed earlier.
The most important finding now is that:
Resolve-DnsName salam7.salam.net
Returns:
76.223.54.146
13.248.169.48
Instead of the expected local address 192.168.1.3.
That also explains why ping salam7 is going to 76.223.54.146. Windows is attempting to contact the address returned during name resolution. Changing the NIC metric or adding another route for 192.168.1.0/24 would therefore not correct this particular behavior.
1. Query the internal DNS server directly
I would first check exactly what your internal DNS server is returning, without relying on automatic DNS server selection.
From the laptop, please run:
Resolve-DnsName salam7.salam.net -Type A -Server 192.168.1.13 -DnsOnly
And:
nslookup salam7.salam.net 192.168.1.13
If these return 192.168.1.3, while:
Resolve-DnsName salam7.salam.net -Type A
Continues to return the public addresses, that would indicate that the normal lookup is not following the DNS path you expected.
If the query sent explicitly to 192.168.1.13 also returns 76.223.54.146 and 13.248.169.48, I would focus the investigation on the DNS server and the salam.net zone rather than on Windows routing.
You can perform the same test for the laptop:
Resolve-DnsName sierac.salam.net -Type A -Server 192.168.1.13 -DnsOnly
Where the expected local A record would be 192.168.1.6.
2. Verify which DNS servers both NICs are using
On both computers, please check:
Get-DnsClientServerAddress -AddressFamily IPv4
And:
ipconfig /all
In particular, check the DNS servers assigned to both adapters.
Because the 192.168.0.x adapter is connected to the ISP network, it is worth checking whether that NIC is also receiving DNS settings from the ISP device.
3. Check DNS registration on the Internet-facing NIC
The fact that the 192.168.0.x DNS records reappeared after you manually removed them is another useful clue.
Windows multihomed clients can register addresses from multiple adapters in DNS. If you only want the internal 192.168.1.x address registered in your internal DNS namespace, check:
Get-DnsClient | Select-Object InterfaceAlias,InterfaceIndex,ConnectionSpecificSuffix,RegisterThisConnectionsAddress
For the Internet-facing 192.168.0.x adapter, review:
Adapter Properties > IPv4 > Advanced > DNS > Register this connection's addresses in DNS
If that adapter should not register its 192.168.0.x address in the internal salam.net DNS zone, disable registration for that connection.
After changing the registration setting, you can remove the unwanted 192.168.0.x records again and retest. Otherwise, manually deleting the records may only be temporary if the adapter subsequently registers them again.
4. Keep the IP connectivity and DNS tests separate
For now, I would test the LAN independently of DNS.
From the laptop:
ping 192.168.1.3
From the desktop:
ping 192.168.1.6
If direct IP communication still fails despite both computers having the correct 192.168.1.0/24 connected routes, that should be treated as a separate LAN connectivity or filtering problem.
The hostname test should then be investigated separately.
5. The reason why are 76.223.54.146 and 13.248.169.48 appearing?
Based on the latest results, those addresses are appearing during name resolution, not because Windows is selecting the 192.168.0.x NIC based on its route metric.
In other words, the important question has now changed from:
"Which NIC is Windows choosing?"
To:
"Which DNS server or resolution path is returning these public addresses for salam7.salam.net?"
The explicit query to 192.168.1.13 should be particularly useful because it isolates the internal DNS server from the normal client DNS selection process.
6. Recommended next step
You have already done quite a lot of troubleshooting, and I truly appreciate the detailed results you have provided.
If the unexpected DNS responses continue after checking the DNS configuration on both NICs, preventing unwanted registration from the Internet-facing adapter, and querying 192.168.1.13 directly, I recommend opening a Microsoft Support request for deeper investigation.
When opening the support case, it would be helpful to include:
- ipconfig /all from both computers
- route print -4 from both computers
- Get-DnsClient
- Get-DnsClientServerAddress
- Resolve-DnsName salam7.salam.net -Type A
- Resolve-DnsName salam7.salam.net -Type A -Server 192.168.1.13 -DnsOnly
- nslookup salam7.salam.net 192.168.1.13
- The DNS zone configuration for salam.net
- The two-NIC topology you shared
- Packet captures from the client and DNS server while reproducing the lookup, if available
Since Microsoft Q&A is a public discussion forum, I do not have access to your environment or to the deeper diagnostic information that Microsoft Support can collect and analyze. At this stage, I would avoid making additional routing changes because the routing table now appears consistent with the intended configuration. A support case would be the safer next step if the DNS tests above do not identify the source of the unexpected responses.
I hope this helps narrow things down. You have already resolved an important part of the original routing problem.
The explicit query against 192.168.1.13 is the test I would focus on next, as it should help determine whether those unexpected public addresses are coming from your internal DNS server or from another name-resolution path.
Thank you for your cooperation during this process.