Hi, first of all I would like to thank you for your great posting. I had the same problem and it was a great help to me.

But I think including the external zone is not a good idea, since the name server now answers all internal queries with two different IP adresses: The internal address (since the requesting client is within acl internal) as well as the included address from the external zone file.

Or did I get it wrong?

Regards,Grischa