DNS through Remote Access

I am having weird/frustrating problems. I am setting up SSL VPN Remote Access but users are having DNS problems. I have set the DNS field in advanced settings to the Astaro's SSL VPN address (10.242.2.1). If I have Automatic Firewall rules checked then DNS seems to work great except to our internal primary DNS server (2008 R2). Once I uncheck the box then it all goes to crap.

All of the users that connect don't need wide open access to our network so I followed the Astaro documentation for V8 on setting up SSL VPN Remote Access and am using the User Network objects.

Any ideas?