I am assuming that no one, whether inside or outside can access owa through owa.domain.com.
If so, then you need to go into IIS and then into the default website properties, then on the IP address field, click the Advanced button. You need to add owa.domain.com here and the appropriate port...