"leaky" DNS troubles (non-port 53)

Naturally. I have things configured this way-- I do have a forwarding list configured for Active Directory, but the DNS is configured to forward to the gateway (with Adam:one), can be seen in the image set below.
I followed instructions at (Active Directory Configuration).
It seems my problem has been experience by others (After Adam:One setup, all outbound access is blocked), but the solutions there (restart) didn’t work; disable Resolver (done already).

suggestions? is there a log that I should look at? I do not mind getting my hands dirty!