Your firewall should never run any other services besides firewall. That is the whole point. The firewall should forward the necessary ports to other dedicated machines on the private network.
So you could either slap BlackIce on a 486 with 2 NICs, or use Linux IP Chains.

j



>Does anyone have a recommendation for firewall software to use on a Windows 2000 Server box that's acting as a Web server? I use BlackIce Defender on my personal workstation computer and have been very pleased with it, but its license appears to disallow using it on a Web server. I've looked at Zone Alarm Pro, which is evidently popular and appears to be well regarded, but I don't know anyone who's actually used it.
>
>I'm guess I'm not sure if I should be looking at a different type of product for use on a server than I would for use on a workstation. Any comments or suggstions would be welcome.