RE: DMZ, defined.

[jwalsh () internoded com]

I'm new to this firewall stuff, but I'd like to offer my opinion anyway.
In my world, a "firewall" should begin at the first point of entry, the
router.  While this may not apply to all, port/packet filtering is the
first layer of protection.  From what I've heard so far, isn't that kind of
what the DMZ is?  No matter where you put machines, you should know what
services or ports they will be "serving", so doesn't it make sense to limit
the access to only those ports/services?  If you buy this, then a DMZ could
be defined as a packet filtered zone, which describes both the third nic
and "pre-firewall" hub concepts.  Calling it a "pfz" would give the
marketing types a simple concept to grasp and spell:-jmw