Developers, network equipment, the use of this technology, developed a corresponding firewall solutions. Called "demilitarized zone structure model." dmz subnet is usually a filter, dmz in the internal network and external networks to construct a safety zone. Network structure as shown below.
[Img] http://publish.it168.com/cword/images/137920.jpg [/ img] dmz firewall program to protect the internal network adds a line of defense, usually considered to be very safe. It also provides a regional placement of public server, which can effectively avoid some Internet applications require open, but in contradiction with internal security policies happen. In the dmz zone usually includes a bastion host, modem pool, and all public servers, but should be noted that e-commerce server can only be used as user connections, the real needs of e-commerce background information on the internal network. |