Bennett Samowich wrote:
> Should hosts on an internal network have direct access to hosts on a DMZ,
> or should they be masqueraded?

>From a security standpoint, DMZ hosts should be treated as Internet
hosts. If you masquerade your connections to the Internet for
security reasons, you should also masquerade your connections
to the DMZ for security reasons.


-- 
Mikael Olsson, EnterNet Sweden AB, Box 393, S-891 28 �RNSK�LDSVIK
Phone: +46 (0)660 105 50           Fax: +46 (0)660 122 50
Mobile: +46 (0)70 248 00 33
WWW: http://www.enternet.se        E-mail: [EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to