> NAT) - you don't *want* your machines to have direct
> global address leases. Then all your stuff will live on
> 192.168.*.*, and router will selectively direct port 80 or
> any other incoming traffic you want to the machine you
> specify, you will see the world from internal network, and
> you will be reasonably well protected.

Yes, I've been putting that off and just running firewalls on all the machines here (not that many) -- but I'll keep looking for a solution (as described) including just adding a second NIC.

The machines here have all been safe and unmolested with global IPs for over two years now, so I might live vicariously a little longer.

Thanks.