> Is there a best practice? Hmm.... if you have the choice, don't install it on the firewall :-) Craig Ringer