This may be a silly question, but if you are using a broadband cable/dsl router does that not work as a firewall? The one I have does not allow for state-full packet filtering, but with port forwarding and other various security options enabled could this replace having a firewall on each desktop? I have 3 machines connecting through this router which also links the internal network. 1 machine is running Windows XP Pro with Zonealarm and the built in firewall up and running. The other is a project gentoo box and my rig is a dual-boot winxpro and SuSE 8.1 box. I have the suse firewall up and running on my box and I'm not sure if that by itself is good enough. I want to get pure-ftp up and running on it and I am concerned about my security. - I am a lu$er and a LUGnut