Is there a preferred method of setting up a Internet facing screened
subnet and the use of public or private IP addresses? Looking at
redesinging our DMZ to only include public resources (www, smtp, imap,
ftp). Presently we use a private IP address range for this that is
NAT'ed at our firewall. Any reasons to change this policy to using
public IPs in the DMZ? Thanks,


firewall-wizards mailing list