If you want it to be more of a firewall and less of a server, I would HIGHLY recomend IPCOP. It's basically and stripped down version of linux running snort. www.ipcop.org