Hi,
If you can access the CRM server with the external firewall IP and that the CRMExternal@domain.com is your CRM organization name, that looks ok. You will also need an ADFS dns record pointing to the ADFS server (well, or any other STS server you might be
using).
The external dns records need to be available in your external dns otherwise you won't be able to use them.
That being said, I haven't got the internal address to work properly and that one is the least documented too IMHO. The login protocol of the internal access url is so confusing that I haven't used it at all.
Regards
Rickard Norström Developer CRM-Konsulterna
http://www.crmkonsulterna.se
Swedish Dynamics CRM Forum: http://www.crmforum.se
My Blog: http://rickardnorstrom.blogspot.se