figure 1 and figure 2 illustrate security functions on the internet firewall.

    users on the lan have access to all resources on the internet that are not blocked by any of the filters. in figure 2, computers on the lan also have full access to devices on the dmz.

    users on the internet can access hosts on the dmz, such as a web server, but cannot access any resources on the lan unless they are authorized remote users.