DNS definitely works on the HQ internal LAN, but I tried joining my computer at home to the HQ domain, and it was a no go, since I couldn't ping the DNS server. So once I configure the new firewall to ...