I have a bunch of machines I want to access from internet (via DDNS), but for security want to separate them from the rest of my machines at home.
Q1) Am I right in saying that I need a firewall with at least 3 network segments - one for internet, one for DMZ, and one for the rest of my stuff?
Q2) Should the setup should be:
/--> DMZ
Internet -> FW
\--> Internal
Q3) Whats would be the minimum set of requirements for hardware FW that would do the job above?