Router: Asus RT AC-66U
Router, IP 10.0.0.1 Apache2 server, IP 10.0.0.2 Clients etc., IP 10.0.0.X Virtual servers: All traffic on port 80 forwarded to 10.0.0.2, port 80.
Pretty simple setup.
However - the router also has a virtual DMZ function. What little I know about DMZ is that it's for web servers and others that are accessible from the internet, who in the DMZ are isolated from the LAN, so that breaking into them makes it harder to get access to the LAN than if they were not in a DMZ. Is this fairly correct?
What I'm wondering is: Is the isolation between external connections to the DMZ server and the LAN the "only" difference from just forwarding/virtual servers, as I'm doing now? And: Won't I still have to forward/virtual server the port 80 traffic to the apache2 server even if it's in the DMZ?