Figure 2: Single-homed firewall requires the separation router to ensure that no packets are leaked into the private network