A few weeks ago, I posted an issue whereby internal users in the trust zone couldn't access servers also in the trust zone that had static NAT set up in the untrust zone using public url or ip address. See original post below.
https://forums.juniper.net/t5/SRX-Services-Gateway/SRX-NAT-Routing-internal-issue/m-p/291379#M40794
I also have a DMZ where I have a few servers and will be in time transitioning as many servers as I can from the trust to the dmz. However our Name Servers for our domains are in the dmz. Since doing the above if I make a request to an internal resource from outside (so at home or starbucks) the domain name is resolving to the internal IP address. I've check the name servers and they are configured corretly all dns records are public IP addresses. domain testing and nslookup's confirm this.
Anyone got any ideas I can provide config if needed.
Regards,
Aaron