I ran firewalls and proxys in the past...Its much easier just to get a hardware firewall (Linx. Firewall)