Firewall question

Just wondering if virtualmin has a built in firewall or if you recommend running it behind an external firewall with only the needed ports open? Just asking because I did a firmware upgrade on mine, and of course it wiped out all the settings. No big deal, but I was wondering about using the DMZ on the firewall for the server and leaving it open as opposed to blocking it.

Thanks.

Mike Murphy