Ruting DNS Server

[l.lucii]

Hello

I have a problem with the routing of name resolution:

We have a cloud system on ARUBA, consisting of a virtual server (192.168.150.1) connected to PFsense (192.168.150.254) LAN side, in turn PFsense Release 2.4.4 connected to the Internet side WAN.

The DNS service is installed on the Virtual Server, with a direct search zone
"pippo.com", and ALIAS CNAME:
456.pippo.com> 192.168.150.1
678.pippo.com> 192.168.150.1

The DNS configuration on the network card is as follows:

Primary DNS> 192.168.150.1 (itself)
Secondary DNS> 192.168.150.254 (PFsense)

Some DNS requests must exit PFsense (WAN) es. 123.pippo.com,
others must be managed by the local DNS and re-enter on the same virtual machine ex. 456.pippo.com, 678.pippo.com.

Which is the most correct configuration for this type of DNS requests / configurations?