I have a few questions about configuring a dmz. First of all this is for wireless clients. This is what I palin on blocking all access from the dmz to the internal network thus the purpose if dmz. Should I block all communication from the internal network to the dmz because right now I can ping the wireless ap that in the dmz zone. I've notice that during my process I seem to have 2networks that I'm working with a pptp pool that is a 192.168.25 subnet a dmz zone that is a 192.168.1 subnet. I plain on giving the pptp pool access to the internal lan for things such as accessing shares email server use and web surfing. Can some please tell me if my thought process is corret or if I'm missing something?