Describe a packet-filtering scenario that works with the DMZ.

What will be an ideal response?

One type of configuration combines packet filtering with a demilitarized zone (DMZ). One common setup is to place packet-filtering devices (routers or firewalls) at either end of the DMZ. The packet filter on the DMZ's external interface needs to allow Internet users to gain access to servers on the DMZ but block access to the internal network. The packet filter on the internal interface performs a similar function for internal users; it enables them to access servers on the DMZ but not connect directly to the Internet. Instead, they connect to the Internet through a proxy server on the DMZ