I have a private network that I would like to allow internet access from public computers. Do I simply need to subnet the public side to prevent access to the private network?