What happens if an attacker has found a technique for sending packets through the firewall to the DMZ without the packets being checked?
Suppose the attacker doesn't know the internal addresses of hosts in the DMZ. Can the attacker arrange for a packet to be sent to the www server in the DMZ without the firewall checking the packet? (I'm thinking about email spoofing and email forgery).