Pity *we* get caught in the crossfire, so to speak.

And a locked down firewall does nothing against IIS exploits (had an argument with a former employer about that). But I'm sure you already know that.

Wade.