What is a DMZ?
The term DMZ Stands for “demilitarized zone,” and in the computer world, it refers to a buffer zone that separates the Internet and your private LAN. (Note: Microsoft calls this a “Screened Subnet”). It’s considered a separate network that is more trusted than the Internet but less trusted than the internal LAN. Many SOHO router vendors have taken to using the term “DMZ.” In fact, those products are simply bypassing their filters and NAT protection when they set up a “DMZ” and forwarding all traffic to a “default host.” This should not be confused with a true DMZ. One way to create a DMZ is with a machine that has three NICs in it — one for the WAN connection, one for the DMZ network and one for the internal network. This is one method of creating a DMZ, but it is not the preferred method. This configuration allows the security of all three networks to lie in one system. If your machine containing all three NICs is compromised, so is your DMZ and your private network. Basically, you a
