Firewall/NAT

I have 4 interfaces on the firewall; lan wan orange and blue. Orange contains my DNS/AD. I have the Blue and lan computers connected to the AD. From the wan I can ping the DNS/AD however using DNS I cant resolve the hostname. I have opened up 53 upd and tcp. For the sake of thoroughness I cloned every port from blue over to the wan. Even creating identical ports I still cant my dns to work. I removed Block private networks. Im thinking this is an issue more to do with my limited networking knowledge. My laptop (the computer in question has the following ip settings.

IP Address 192.168.1.20
Subnet Mask 255.255.255.0
Gateway 192.168.1.103 (wan firewall port)
               192.168.1.1 (to the internet)
DNS        192.168.3.2 (DNS/AD server)
               192.168.1.1


Any firewall (or other) suggestions would be great. 

So an update that might shine some light on the situation. The DNS/AD server can ping a computer that needs to join the domain. however the computer cant ping the DNS/AD.

So if I connect my laptop to the lan connection I am able to get to the point that a domain username and password is required. The identical rules are on the wan however the wan wont accept the connection. Any suggestions?