put DMZ and NAT closer together, easier to read.