The long answer takes a few more lines to answer :-)
The number of web servers is not really an issue related to the firewall itself.
What is relevant though is, whether you have public IP-ranges for your networks or if you have to use masquerading on the secure LAN.
If you have public IP-ranges, it is just a matter of having DNS set up with different domains pointing to different IP-addresses.
If you do not have public IP-ranges but HAVE one single IP-address for your firewall external interface, you can also have multiple web servers. Two domains, let's say www.mysite1.com and www.mysite2.com both points to the same IP-address. Your firewall doesn't really care about the difference between the two domains and just pass on the http request to your webserver on the inside. If your webserver is configured with support for virtual webservers, the webserver will understand the difference between mysite1 and mysite2.
If you have a small range of public IP-addresses, you can combine this with masquerading/NAT and have your firewall respond to the different IP-addresses differently.
If you do not have a permanent IP-address for your firewall external interface (running DHCP or PPPoE for instance), you may have to sign up for some dynamic DNS service to have multiple web servers.
All in all, there are only opportunities in this scenario :-)
Best regards, Ørjan Sandland
[ 09 January 2002: Message edited by: Ørjan Sandland ]
