It is indeed complicated, but it has the benefits of more security. It all 
depends really on what sort of pages are going to be served from the web 
server as to whether it is worth the extra effort.

But, whatever you do, I agree that you need to get hold of the illusive 
firewall admin!..lol

Chris

> This is getting advanced. You are talking about a DMZ configuration, 
where
> all Internet-exposed systems have thier own network.
> 
> This requires three sets of firewall rules. Internet to DMZ, LAN to DMZ, 
and
> LAN to Internet.
> 
> Again, the best advice is to just tell the firewall admin what you need! 
8-)
> 
> 
> > You could put the webserver on the outside of the firewall. But you 
would
> > still need the firewall configured so that you have ftp access to the
> > webserver from inside on your intranet. So it does look like you will 
need
> > to talk to the administrator of the firewall.
> >
> > If you have the webserver on the outside, then your internal network 
will
> > be more secure, especially if you will be running alot of scripts,
> > however, it may leave your webserver vulnerable.