A network added between a protected network and an external network,in order to provide an additional layer of security. (http://linux.about.com/...)