A short post on stuff I've learnt the painful way running bare metal and VM firewalls. Anything obvious I've missed please comment and I'll update with attribution.