My home server is now fully virtualized. When I ssh home I reach "Outland", an OpenVz container. Outland has limited access to the rest of my home network, but isn't completely isolated. I've taken the pragmatic view that allowing some access further "in" is ok too, though there's a two ...