On Thu, 4 Apr 2002, Laura A. Robinson wrote: > A "true" DMZ may have a firewall between the Internet and the DMZ, as well > as between the DMZ and the intranet.
Not in the traditional definition of the term "DMZ"- Bill's exactly accurate about its placement. Traditionally Internet-accessible networks behind firewalls but not in the inside were termed "Service Networks," not "DMZs"- DMZ tradtitionally meant "network the external interface of the firewall and internal interface of the border router share." Personally, I prefer to stick with the traditional definitions, as it makes it simple when discussing architectures to infer the ammount of protection and administration in place. Paul ----------------------------------------------------------------------------- Paul D. Robertson "My statements in this message are personal opinions [EMAIL PROTECTED] which may have no basis whatsoever in fact." _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
