Yeah, quite right.
I just meant the DMZ host might not be necessary and if you are security paranoid and it doesn't cause any problems why not have the benefit of both firewalls?
I wonder if the Pi makers had this use in mind when they devised these neat devices?
Originally designed to do something about the dire state of education in the UK, Pis have found all manner of interesting uses, so much so that they recently floated on the stock exchange.
Pi holes are ubiquitous in network security, and safely away from Windows meltdowns. There must be 1000s of Pi hole users out there. Must ask Eben about this one when I talk to him next week.
Raspberry Pi still runs on ARM based Linux, so it's still a target for those up to no good. So you still have to be careful.
*Probably looking to move to an ARM router/gateway/firewall, lvl3 switches, and APs at some point.