On 6/6/06, Claudio Castro <ccastro at unr dot edu dot ar> wrote:
> Hi all,
>  I was just testing some rules when I find that the DMZ zone is
> accepting any kind of traffic FROM the LAN zone....is this correct by
> default? Because I don have any rules allowing this in my dmz's ruleset.
>

Your default LAN to any rule allows this.

Rules are applied on the interface the traffic enters (in this case the LAN).

-Chris