Hi, we have here a web application that allow you to upload files. This application runs on a web server that is connected to a DMZ net with public addresses. Using a firewall rule this web server has mapped a drive to an internal server which is storing the documents. The uploads are made to a virtual directory that is pointing to the mapped drive. Actually, the firewall rule is allowing the NBT traffic between the webserver and the "internal" file server... I don't think that is right allow this kind of traffic between the DMZ and the internal net, but i don't know the right way... Can you help me?

Thank you in advance!