[plug] LAN security

[Richard]

Just a general question. I am about to set up apache, squid and bind
(and possibly an ftp server) on our home LAN, and I was wondering
whether to set them up on the Internet gateway machine or one of the
hosts behind the gateway, from a security perspective. Apache (and ftp)
will be visible to the wider Internet as well as the LAN. Any thoughts,
or good sites anyone could point me to?