firewall configs

[kfrisco @ shrike . depaul . edu]

I have 2 vendors who will remain unnamed, who have drawn out 2 very
different firewall setups.  Does anyone have a bias or comment?

setup 1    Internet - router - mail server      -       packet
                             - web server       -       filtering - internal
company
                             - interactive database -   firewall

setup 2

                                        _______Internal Company
                                       |
                                       |
        Internet - Application -    -  | mail server
                   firewall            |interactive data base
                      |
                     web server     



Both external clients and internal employees need to access the interactive
database.
On setup 2, I was advised that rules can be used to restrict who and what
goes where.
Basically create a road map throught the F/W.

On setup 1, I was advised to use only the router to send people to either
the mail or web server.  Also I was told that this could leave my database
open to compromise (the thought did cross my mind.)

The last problem, is the d/b will need to update btrieve files from a
different server on--line.

Thanks for listening!