In many SOHO environments, DMS means something like "Any inbound requests will be sent to the DMZ'ed machine" ... in that situation, likely some device is doing NAT for a LAN, but only outbound requests from the DMZ'ed host. It should run a firewall.
Heck, it should probably run one whether or not it's DMZ ....