What is everyones thoughts and take on exposing applicaiton/web servers to outside users? I have always believed that any server accessed from outside the internal network via the internet or any other situation should be in a DMZ. I know some people who are ok with poking holes in the firewall to allow access directly to that applicaiton server where is resides on the internal server vlan/network.
What is your practice?
