ZBFW example with router as DNS server

hostname R1
!
ip name-server 23.23.23.3
!
interface FastEthernet0/0
ip address 12.12.12.1 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 12.12.12.2

hostname R2
!
ip name-server 23.23.23.3
ip inspect log drop-pkt
!
class-map type inspect match-all CM_DNS
match protocol dns
class-map type inspect match-all WEB_to_www.garry.com
match access-group name WWW.GARRY.COM
match protocol http
class-map type inspect match-all CM_ICMP
match protocol icmp
class-map type inspect match-all CM_HTTP
match protocol http
class-map type inspect match-all CM_TELNET
match protocol telnet
!
policy-map type inspect PM_INSIDE2OUTSIDE
class type inspect CM_DNS
inspect
class type inspect WEB_to_www.garry.com
inspect
class class-default
drop
policy-map type inspect PM_OUTSIDE2INSIDE
class class-default
drop
!
zone security ZONE_OUTSIDE
zone security ZONE_INSIDE
zone-pair security ZP_INSIDE2OUTSIDE source ZONE_INSIDE destination ZONE_OUTSIDE
service-policy type inspect PM_INSIDE2OUTSIDE
zone-pair security ZP_OUTSIDE2INSIDE source ZONE_OUTSIDE destination ZONE_INSIDE
service-policy type inspect PM_OUTSIDE2INSIDE
!
interface FastEthernet0/0
ip address 12.12.12.2 255.255.255.0
zone-member security ZONE_INSIDE
!
interface FastEthernet0/1
ip address 23.23.23.2 255.255.255.0
zone-member security ZONE_OUTSIDE
!
ip access-list extended WWW.GARRY.COM
permit ip any host 23.23.23.3

hostname R3
ip host http://www.garry.com 23.23.23.3
!
interface FastEthernet0/1
ip address 23.23.23.3 255.255.255.0
!
ip route 0.0.0.0 0.0.0.0 23.23.23.2
!
!
ip http server
no ip http secure-server
ip dns server
ip dns primary garry.com soa R3 garry@garry.com 21600 900 7776000 86400