Talk:DMZ (computing)

message: I have updated the article and removed the stub. If you have any comments, please let me know. Jasonlfunk 15:45, 11 October 2007 (UTC)
thread_title:  Update 

message: The picture does not show a proper DMZ. It should look like (in ascii art):
                                      |
 [internet]----[Firewall/router]----- | ------[Firewall]-----[Internal network]
                                      |
                                    [DMZ]
What is shown here is a three-legged firewall concept.
Greg Rojas
I am confused as to the way a DMZ is laid out.  The pictures are showing two different methods, which I understand are differences in topography.  But, how is the ascii art dipiction laid out with the actual machines, is there a router between the firewalls?  There should maybe be an illustration in the article or more detailed discriptions.  12:08 CDT, 02 June 2006
====Software used to make them?====
Unrelated query, but, anyone know what software was used to make the illustrations in this article? I doubt it was Visio. Thanks! —S3BST3R (talk) 22:49, 28 June 2011 (UTC)
replies: text: The SVG files contain the following comment: "Created with Inkscape (http://www.inkscape.org/)". 149.32.224.39 (talk) 18:44, 20 October 2023 (UTC)
thread_title:  Illustrations 

message: Unrelated query, but, anyone know what software was used to make the illustrations in this article? I doubt it was Visio. Thanks! —S3BST3R (talk) 22:49, 28 June 2011 (UTC)
replies: text: The SVG files contain the following comment: "Created with Inkscape (http://www.inkscape.org/)". 149.32.224.39 (talk) 18:44, 20 October 2023 (UTC)
thread_title: Software used to make them?

message: The term DMZ has been used to describe the boundary between autonomous networks, likely predating the adoption of the term by firewall vendors.
Cjcoleman 20060121
it was used for computation purposes too.  —Preceding unsigned comment added by 59.177.41.244 (talk) 09:50, 24 December 2010 (UTC)
thread_title:  The boundary between 

message: I believe that many people do this: configure the one Firewall to be the connection between DMZ and LAN and External.  However, if the Firewall is breached from the outside then there is the potential to get to the LAN as easily as they get to the DMZ.  It is a more secure solution to use 2 Firewalls.
82.211.102.231 10:09, 1 December 2006 (UTC)
thread_title: Response to above

message: Everyone understands that the term "DMZ" in computing is short for "demilitarized zone", but no one in computing ever actually says "demilitarized zone" (except in answer to the question "what does DMZ stand for?"). And the article reflects this; the full term is never used again after the first sentence.
So I think the article should be renamed to "DMZ (computing)", and the first paragraph updated accordingly. Or maybe even renamed to just "DMZ", with a disambiguation link to "Demilitarized zone" (since, eg, googling for "DMZ" turns up this article first and the military article second).  —Preceding unsigned comment added by 24.99.22.247 (talk) 18:13, 30 May 2008 (UTC)
replies: text: Done --h2g2bob (talk) 21:13, 28 October 2008 (UTC)
thread_title:  Article title wrong? 

message: Better to call this a 'Data Management Zone'.  —Preceding unsigned comment added by 194.110.215.6 (talk) 12:40, 10 March 2009 (UTC)
thread_title:  Article title wrong! 

message: The Dual Firewalls section mentions that using two firewalls is either "defense in depth" or "security through obscurity" as if they are opposite viewpoints. However, using two firewalls is not considered pejorative in this case (the security through obscurity wikipedia entry specifically states it is a pejorative term). It's goal is not to simply hide the internal network by obscure means (the goal of a single or dual firewall with DMZ is to "obscure" the LAN from access by design), but would provide real extra protection in the case of a security hole being found in the first firewall that didn't exist in the one from a second vendor. Thus, it is defense in depth (if the first measure fails the second may stand), but does not rise to the level of security through obscurity because even if you told the world the brand of both firewalls in use (and even the configuration, assuming both are properly configured), a vulnerability in the first wouldn't necessarily allow access through the second. Davidszp (talk) 17:42, 5 April 2011 (UTC)
thread_title:  Dual Firewalls and security through obscurity 

message: There is so much overlap between this article and its synonym, Screened subnet, that I think we should consider merging these two articles. Let's discuss. Stephen Charles Thompson (talk) 08:09, 17 October 2018 (UTC)
replies: text:  I doubt there's a significant difference in age, as a Google Books search for DMZ firewall for 20th century also gives several books from the mid-1990s using the term, often without a sense of novelty. --Joy [shallot] (talk) 20:03, 17 October 2018 (UTC)
replies: text: The 1994 ref uses both. 😊 All the best: Rich Farmbrough, 20:20, 17 October 2018 (UTC)

text: "There are a number of terms that are used, such as bastion hosts, screened subnets, DMZ, or perimeter networks that can be confusing, especially when used together." ... "Another term that may often causes confusion is the DMZ (demilitarized zone), as opposed to a screened subnet. A true DMZ is a network that contains hosts accessible from the internet with only the exterior, or border, router between them. These hosts are not protected by a screening router." ...  "A screened subnet may also be a collection of hosts on a subnet, but these are located behind a screening router. The term DMZ may be used by a vendor to mean either, so it is best to verify which they mean." Stephen Charles Thompson (talk) 08:55, 17 October 2018 (UTC)

text: T|he earliest refs I can find on Googlebooks are 1994 (earlier matches ones were due to mis-dated items).  It's not clear where the term comes from. All the best: Rich Farmbrough, 14:27, 18 October 2018 (UTC)
replies: text: I'm not seeing that wording or getting that interpretation from the screened subnet article. What you are describing sounds more like Multitier architecture. If you have a good references for this, I think we should update the screened subnet article to reflect this. Stephen Charles Thompson (talk) 22:48, 18 October 2018 (UTC)
thread_title:  Propose merge 

message: I am not sure which article title would best encapsulate the merged content. Wikipedia manual of style probably suggests using the most authoritative or popular term. Let's add our findings in the sub-sections below. Stephen Charles Thompson (talk) 08:40, 17 October 2018 (UTC)
replies: text:  I doubt there's a significant difference in age, as a Google Books search for DMZ firewall for 20th century also gives several books from the mid-1990s using the term, often without a sense of novelty. --Joy [shallot] (talk) 20:03, 17 October 2018 (UTC)
replies: text: The 1994 ref uses both. 😊 All the best: Rich Farmbrough, 20:20, 17 October 2018 (UTC)

text: "There are a number of terms that are used, such as bastion hosts, screened subnets, DMZ, or perimeter networks that can be confusing, especially when used together." ... "Another term that may often causes confusion is the DMZ (demilitarized zone), as opposed to a screened subnet. A true DMZ is a network that contains hosts accessible from the internet with only the exterior, or border, router between them. These hosts are not protected by a screening router." ...  "A screened subnet may also be a collection of hosts on a subnet, but these are located behind a screening router. The term DMZ may be used by a vendor to mean either, so it is best to verify which they mean." Stephen Charles Thompson (talk) 08:55, 17 October 2018 (UTC)

text: T|he earliest refs I can find on Googlebooks are 1994 (earlier matches ones were due to mis-dated items).  It's not clear where the term comes from. All the best: Rich Farmbrough, 14:27, 18 October 2018 (UTC)
thread_title: Which article should we keep?

message: * I vote in favor of merging the contents of screened subnet to the article DMZ (computing) for the reasons listed above. Stephen Charles Thompson (talk) 21:54, 18 October 2018 (UTC)
replies: text: I'm not seeing that wording or getting that interpretation from the screened subnet article. What you are describing sounds more like Multitier architecture. If you have a good references for this, I think we should update the screened subnet article to reflect this. Stephen Charles Thompson (talk) 22:48, 18 October 2018 (UTC)
thread_title: Call for vote