The term DMZ is used to describe a separation area between a trusted zone and an untrusted zone. Ex: internal network vs internet.
Can it be used to refer to a separation area between a trusted zone and a less trusted zone.?
For instance,in mail architectures, we often have a mail gateway in a DMZ and an internal mail server in an isolated network that connects for instance to a domain controller.
Can the isolated network that hosts the internal mail server be called a DMZ?

1 Answer 1


DMZ has its own detailed meaning which is fully described on Wikipedia. It implies a machine that receives all external traffic that is not already linked to an internal request to the predetermined DMZ controller.

Many people simply use DMZ as a means of bypassing the main router's firewall but it can be used to implement a more advanced firewall.

To answer your highlighted question directly, DMZ can indeed be applied at any and multiple levels of networking. So yes there could be a DMZ in the internal network between a trusted zone and a less trusted zone but that is not typically needed in most networks, as the router is usually sufficient to handle this.

  • Please don't confuse the true meaning of a network DMZ with the bastardized meaning touted by consumer home router manufacturers. While they could be considered related, they are most definitely not the same.
    – user
    Jun 4, 2016 at 12:58

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .