In your DHCP, you could hand out the DNS servers like this:1st: DC DNS address2nd: firewall DNS address