Please can someone tell me why NAT is necessary for the internal network and not for the DMZ zone? And, why it is safe to use public IP addresses for servers on the DMZ and not on the internal network? Many thanks, Simon