because the hosts answer packets directly to clients which do not expect that to happen. the alternative would be to explicitly set up NAT, however this solution is simpler. the internal networks.
