this post has moved to http://bradmarsh.net/index.php/2008/01/17/a-better-look-at-2008s-firewalls/