Hello all. Sorry for the long post but I want to make sure I'm clear. I'm setting up a proof of concept of sorts for an architect's small business. I want to set up some OS X Server services (contacts, calendars, wiki, FTP,...) with FileMaker Server and a CAD solution running on top. This will allow the architect's small office to be mobile, sharing and collaborating on projects. At the moment I have a Mac Mini running OS X Server and a domain name up and running. I have a dynamic IP address from my ISP - swapping to a static solution would both cost more and reduce my available bandwidth. For the purposes of testing I can live with this as I have the Mini tweeting me it's WAN IP when I send it an email in case I'm not at home so I can edit my domain zone file. I'm still learning some python to edit a script to automatically update the zone file, but for the moment it's OK. My biggest problem is that the cable modem/router provided by the ISP has very limited capabilities. The main problem being that it cannot forward enough ports to the Mac Mini to make all services available at once. For the last few months we have been testing either FileMaker Server or the CAD server, but not both for example. For the moment there is no budget at all so I want to do this all from my home so that we can test everything for a few months or a year with this architect. Here comes the part where I ask for advice. I'm going to be trying it out on my weekends anyway, but basically I'm learning all this stuff as I go along so any help and sharing of past experiences would be greatly appreciated. In order to make the Mac Mini available to as many services as possible, I now want to switch my modem-router into bridge mode and connect the Mac Mini server directly to the internet. Using the thunderbolt ethernet adapter, I then want to share the internet connection to the rest of my LAN (a few macs, Apple TV, etc). So the plan is: WAN -> modem bridge -> Mac Mini Server + NAT/DHCP/IceFloor -> ethernet Switch -> LAN + Airport I have been told this can be quite risky security wise, but I've discovered an app called IceFloor that seems to help (basically taking over the role of the router's limited firewall). I have of course searched many posts here and forums elsewhere. There is a lot of info out there but it's often just fragments. My biggest concern is the NAT part for my LAN as I've seen many people say it doesn't work, but as usual nobody complains when it does work! Thanks for any advice, help and/or links.