Internet accessible screened subnet - use public or private IPs?

["Matt Bazan" <Mbazan () onelegal com>]

Is there a preferred method of setting up a Internet facing screened
subnet and the use of public or private IP addresses?  Looking at
redesinging our DMZ to only include public resources (www, smtp, imap,
ftp).  Presently we use a private IP address range for this that is
NAT'ed at our firewall.  Any reasons to change this policy to using
public IPs in the DMZ?  Thanks,

  Matt

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards