Okay, a question for the hive about security philosophies. Let's say I have a DMZ. In this DMZ I have multiple hosts, providing services to the external network and to the internal network as well.

I am arguing with a programmer right now and I am coming from an SA perspective. I do not want to punch any holes between our DMZ and LAN networks. The DMZ is setup with a one trust to only trust the ...