A DMZ would look like this:
Code:
WAN
I
I
Router
I
DMZ Area
I
Web Server DNS Server FTP Server
Firewall
I
I
Local Lan
I hope that looks right on your machine. The Web Server, Firewall, DNS Server and FTP Server would all have Public IP Addresses and are usually physically connected to the same Ethernet switch. They would be protected by whatever firewall capabilities were in the router.
The Firewall device would be running NAT and protect all the devices on the Local Lan which would all be using private IP addresses.