On Fri, 5 Mar 2004 13:42:46 -0500, Dave McGuire wrote: > A firewall should be a separate machine. True, but a host-based firewall is better than nothing. And a host-based firewall behind a NAT router is only a little bit behind a 'proper' firewall.