TWO broadband routers?

[rlism]

Is having two dsl/cable routers in a series in effect setting up a DMZ that can house multiple computers?

The first acts as a firewall for your computers in the 'DMZ' while the second router(connected to your the first router) would provide protection for your 'inside' LAN? Would this actually provide additional security? Would this cause network peformance problems? Are there any specific programs or types of programs that won't work under this configuration? Is this just a dumb idea? =P

Edit:
I guess the advantages I see are 1) the DMZ can house multiple computers, 2) specific ports can be mapped to specific computers in the DMZ rather than have the entire computer exposed, 3) provides more security for computers that aren't running internet services. Are any of these legitimate? Anything I might be missing? Any disadvantages besides setup complications and costs?

 

[cavingjan]

Only the computer hooked up to the first (outermost) router will gain the benefit of DMZ. Any other computer on the other router in the DMZ will still be under the effect of the first router, thus counteracting the reason for putting it in the DMZ in the first place. If you are concerned about the one computer than would be in the DMZ, get a software firewall to go with the router. How many computers need to be in the DMZ that just can't have a few ports mapped to them? If you need multiple computers set up like this, consider getting a better router that will allow you to place computers in the arrangement you like. Its just going to cost you more. (This is assuming you are using cheap residential routers and not higher end routers)

 

[Ladi]

Most residential broadband routers can forward ports to multiple systems; additional software isn't needed. In addition, setting DMZ on routers such as the linksys is as simple as going to a site and changing a number...so if all computers don't need DMZ at the same time, that would be a possible workaround. Servers also often don't need to be spread around to different computers (ident only needs to run on one for it to work for all irc connections, for instance).

So to answer your questions/comments:
1) cavingjan is right in that the DMZ of the 'outermost' router is the only one that would matter in practical usage.
2) Specific ports can be mapped anyways in most routers (check your documentation and/or update your firmware).
3) Not really.

~Ladi