I have a Watchguard x700 firewall it is not allowing internal clients to access websites on my DMZ. This is an article explaining the problem:
A caution about static-NAT
There is a limitation in the Firebox NAT implementation where clients behind the Firebox cannot access the public IP address of a statically-NATted server which is on the same Firebox.
Imagine your Firebox is configured with an external IP address and assigned the name www.mycompany.com. There are many clients behind the Firebox. These clients use an external DNS server provided by your ISP. The Firebox has a static-NAT rule that forwards incoming port 80 (HTTP) requests from the Firebox’s external interface to a privately addressed Web server on the optional network.
Now a user on the trusted network decides to browse your company Web site and points his browser to http://www.mycompany.com. The ISP’s external DNS server correctly resolves this name to the external IP address of the Firebox. Unfortunately, the client is never able to make the Web connection.
Workarounds to dynamic NAT outbound and static NAT inbound situations
Configure an internal caching DNS server and point internal clients to it. Create a host entry on this DNS server that resolves the name of your company web site to the internal IP address of the Web server.
…………..It is the work around that I am having problems with. I do not know how to setup my internal Win2K DNS server to do this? How do I setup DNS to do this?