Well just use the 10.120.135.126 IP address. Your front-end MTA will then forward to it on the private IP and from within the Admin GUI you can set the smart-host to be the IP of the other MTA. No need to specify you public IP in /etc/hosts. To be honest that is exactly the way I have my setup configured with a MailScanner server in-front of ZCS.
__________________  |