DMZ design

["me null" <me_null () hotmail com>]

Hello i was hoping someone could answer a couple questions i had bout DMZ 
design. Speeking from a serurity stand point is it best to have ur DMZ and 
Internal Network seperated by a router (option 1) or is it better to have ur 
Internal Net. connect to the internet through the DMZ (option2) all help is 
appracated thx

option 1     internet
                    |
      DMZ --- router ---- Network

option 2  internet -- DMZ --- Network

_________________________________________________________________
Get MSN 8 and enjoy automatic e-mail virus protection.   
http://join.msn.com/?page=features/virus


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------