In which network location should an external DNS server be placed?