thinks Labsy,
I have this Scenario:
domain: internet.ao with a: 1.1.1.1 and mx:a, and with ns.domainprovider.ao and ns2.dominprovider.ao
firewall / Router with public ip: 1.1.1.1 (the some with domain "a" record) and gw: 1.1.1.2 (isp router) and lan ip: 172.16.1.8
zimbra
Lan 172.16.0.0/16 where zimbra have 172.16.1.9 with gw: 172.16.1.8
zimbra domain: internetdomain.ao
zimbra smtp host: mail.internetdomain.ao
I was configured dns on zimbra machine with those parameters
ns: 172.16.1.9
a: 172.16.1.9
mx: a (172.16.1.9)
zone "internet.ao"
reverse zone 16.172
forwards: ip of ns.internetdomain.ao
hosts and resolv
/etc/hosts: 172.16.1.9 mail.localdomain.local mail
/etc/resolv.conf: nameserver 2.2.2.2 (the same ns.internetdomain.ao)
I'wrong, but i don't know better configuration

for this scenario
sorry about my english
thanks