you should of told the guy he's an idiot for doing it that way. 1 interface for an http server? wtf u thinking numb nuttz. HTTP should be on a dmz with a limited set of networks, class c with a /30 to limit the the amounts of attacks. Where's the fw infront of the http server to keep the kenyans, chinese and everybody else in sub sahara africa out???