I recently moved our office networks from two different firewalls to a single firewall. Before we had the office LAN1 firewall and then we had the DMZ1 firewall. In an effort to make things easier we moved from our aging ZyXel firewall to pfsense. I have used pfsense in the past but it has been a number of years so I'm still working my way through some things.
I should also not we have two internet sources so there was/is a fail-over gateway for backup internet in the LAN1. After the move everything seems to be pretty good. fail-over works and web-servers are accessible from there url unless your inside of the office on LAN1.
I have looked around and the initial answer seemed to be NAT reflection but that does not does not help the urls are still resolvable from in the office. Our internal ADDC is something like mb.shft.com, it s a...