Personally I use OpenBSD 2.9 and IPF on an older machine... (I think it's a p3)... We've never had someone manage to break in. And it's fast enough that you'd never know it was handling the traffic for a dozen or so PC's.

We also use similar setups at work only better hardware...

-_LeeBkr311_-