When configuring services in the DMZ to exchange data with the internal LAN which scenario would be more secure:
DMZ service pushes data to LAN service
LAN service pulls data from DMZ service
Which would be more secure, to expose service running in DMZ to accept connections from LAN or prepare LAN service to be able to accept connections from DMZ.
There are different architectures in place, some use a single firewall and others use a two firewall setup.