Read only public but read write internal?

[Chris Dawson]

I want to run a couchdb node which allows public read access so that  
replication can occur but then protect writes behind an application  
server.  Should I set up a firewall or proxy rule that disallows  
anything but GETs on the public IP and then have an application server  
running on the localhost interface which has full HTTP verbs allowed?   
Or is there another topology I should consider?

Thanks
Chris
Chris Dawson
971-533-8335