Jonesy: If your box is in the demil zone you need to make sure that you do what I said in my previous post. If you don't that box is wide open since your firewall will not filter any packets to it.