...on Fri, Mar 03, 2006 at 03:03:23PM +0100, oliver simon wrote: > Internal Network is another IP-Range ... DMZ has official IPs for the > services and its private ip-range for the hosts themself. > DMZ: 10.50.0.0/24 + Official IPs for services > Internal(!)Lan: 10.23.0.0/24 > DBNet (e.g.): 10.28.0.0/24
Usually, you would do proxying or NAT for the official service addresses on your outer gateway. Not much use having them on the DMZ network, it just adds unneccessary complexity. Alex. (Yes, I know that doesn't answer your question :) ...)
