DNS Best Practice
You might have seen the model we use as I've described it in many places here:
The 'Global' tab of 'Network Services >> DNS' lists "Internal (Network)" (also other internal networks, like "DMZ (Network)" and any "VPN Pool" if applicable…