routing / firewall question