How can I build an exception for allowing users on the inside to access a web server on port 80 in the DMZ? They cannot do this now because, in my opinion, the server is going through a NAT to the public address, so how can I set it up where any request from the inside on port 80 to this server will not translate the server IP to a public IP (via NAT)?
