In a 3 tier setup with DMZ you would normally put the 1st tier (the web server) in the DMZ with connections to the 2nd tier (OFBiz) in you own network. Of course, for optimal security you would have to have a ssl tunnel between tier 1 and 2.
Regards, Pierre Smits *ORRTIZ.COM <http://www.orrtiz.com>* Services & Solutions for Cloud- Based Manufacturing, Professional Services and Retail & Trade http://www.orrtiz.com
