Running frontend services such as these can open up your LAN to untrusted traffic, which is where a DMZ shines by filtering ...