LOL...ok guys, settle down
Joe got the joke...he's familiar with my cyber-paranoia.
Just FYI, I run the main FW on a dedicated box which is also my router/gateway.
I run another firewall on internal nodes because the main firewall is not able to determine the app that is making passing packets...sure would be nice if it could. The firewalls on internal boxen ARE able to match applications with the requested communications...so things are kept in check from the inside in this manner.
Now...back to patching the hole I had to punch in the firewalls just to post this message
