About the localhost address thingy, I dont know much about it but is it possible that someone has found an expliot on the firewall and downloaded something maliciuos to it e.g a mal version of its firmware? I dunno just an idea i dont know much about it really.