The problem with your server is that your smtp daemon is trying to send email through an other server which does not allow relay. Check your...
If u have a server in dmz zone then u have to dnat and snat to your server to be visible. The only problem in this case is that all the logged...
The first thing in a good firewall configuration is to drop everything -in out forward- and then open only needed ports for in-out and forward....
I am using samba 3 as pdc for 2 years now. It was a little bit tricky the first time but in the end it was just a game.
Separate names with a comma.