Physical Separation: The DMZ

Put the servers on a separate subnet