well, i've setup smoothwall, which means my internal network (and the webserver) in the green zone, is infintely more secure, as it's a firewall as well as a router... but the only problem is that i can't figure out how to grant access to the webserver. anyway, here's a diagram of the network.