So far good information. It looks like the best thing would be to get my mail server and web servers in a DMZ. My problem with the PIX 506 is that it only has 1 ethernet port. I've checked with the documentation and a DMZ on this model is not possible. Am I missing something? Should I upgrade to a larger PIX or maybe put something like a SmoothWall in front to create the DMZ and have the PIX behind protecting my lan?