Why did you expect that your LAN machines would be able to access the LAN servers by the external IPs? I do not think that should work.
I set up DNS on ZS and can access the LAN servers by their FQDNs, which is the only way to access the virtual hosts on Apache anyway.
