the DMZ is, by definition, outside of the firewall, is it not?

EDIT: "unaffected by the firewall" might be a better word choice.