[oclug] DMZ questions

[Trevor Curtis]

Hey,

I'm trying to learn how to implement a DMZ for my home network. And I
have a few questions I can't seem to find answers too.

- Is it best for the DMZ to have a different subnet than my private
network (the non-dmz'd part of my home network)? If so, is it still
possible to access my dmz'd machines from my desktop machine?

I spoke about this with some at the beer sig last week, and I'm just
curious as to what others may also offer/suggest. I have a 486 acting as
a firewall doing NAT. I have my "server" machine, and 2 desktop machines
all on the same network a.t.m.

thoughts?
TC