>I forgot to write, that I use postgresdb for dynamic HomePages. If that is the case, you can go ahead and deny 5432 on the outsideinterface, (I am assuming here) since your webserver will access it on aninside interface.
jc