We have a server in our DMZ called "Sue". Our wireless clients' DHCP scope has a private inside address, but a single DNS entry for a server on the outside.
The outside DNS server has a record for "Sue"'s public address. So when an inside wireless client resolves "Sue" it translates to the public address, and when the the inside client tries to access it using that address, it is blocked.
Does this sound right?
Why is that?
Does this make sense?