Ben-Nes Michael <[EMAIL PROTECTED]> writes: > Hi All > > Small confusion. > > what exactly is DMZ ? > If it is an area between the Internet and the Firewall then its not under > protection of the firewall. > If so what the firewall manage here ?
To put it simply, if not comprehensively, it is the area that is accessible from outside your organization. E.g. you may want to let outsiders to access your web and ftp servers, but not the rest of your LAN, for which, e.g., you will disallow any connection whatsoever that originates from outside. This means that the DMZ will be a different network, and firewall rules will be different for the publicly accessible servers. This does not mean that they are not protected by a firewall. Whether or not there is an additional firewall between the DMZ and the LAN depends on the situation. generally, your LAN will have an additional "line of defence" compared to the DMZ. The above is not a comprehensive description, but does it resolve the confusion? -- Oleg Goldshmidt | [EMAIL PROTECTED] ================================================================= "... Of theoretical physics and programming, programming embodied the greater intellectual challenge." [E.W.Dijkstra, 1930 - 2002.] ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
