I use a Mikrotik router. It provides nearly all of the capabilities of Linux IP tables with a web or command-line UI. The hardware is very inexpensive, low-power, and reliable (Linux-based OS kernel running on an embedded MIPS/ARM/PPC SoC). Unfortunately, the documentation has always been...