so, is "default web site" listening on "all unassigned" ip addresses and on port 80?
in your router, is the ip address for mail.abc-server.com forwarded to the same box GFI's webserver is on?
does the gfi site do any other redirecting after internal clients connect to it?