Hi All,
c) i don't know about you, but i wouldn't be inclined to trust the security of a $100 consumer-grade firewall.I agree. Use a PC running SE Linux instead. ;)
I would just like to add (to this already long thread but thats what I like about Debian-ISP) that an OpenBSD firewall in a bridging configuration makes for a good setup. This saves on IP addresses and provides added security due to the "stealth" nature of the firewall. One can also run Snort on it. And I might add the OpenBSD packet filter syntax is my favourite as far as writing firewall rules go.
Cheers, Fred.