I found that what you may not want is that some ip's added to public may not need access to services on public.