[QUOTE=megamaced]
That makes it very attractive. I’ll look into it some more and have a chat with my landlord.
[/QUOTE]
I believe that doing it right the first time actually saves time & money in the long run. That being said, I think the m0n0wall option is the best long-term solution for what your landlord wants to do, so it should definately be strongly considered.
[QUOTE=megamaced]
BTW, what are the differences between a home-grade router, and a corporate router costing £1000+? Sorry, if that question sounds a little dumb, but I’ve gotta find out someday 
[/QUOTE]
A home grade router usually has one WAN connection and one LAN connection. The LAN side can be split up in the form of an attached layer-2 switch, but it’s still a single point of entry into the router. Usually these things have little or no security on the local side of the router, and advanced features like traffic shaping or egress filtering are completely out of the question. Also, the embedded RAM is usually between 4 and 16 megs, so lots of simultaneous socket connections will cause unbearable latency.
A Cisco firewall, for instance the ever-present PIX, starts at around £1000 (for the low-end model). The PIX has a substantially more powerful CPU than your typicall home/SOHO router, much more RAM, and multiple interfaces for segmented network topologies. This can accomodate advanced setups, such as semi-trusted segments (called DMZ’s), which keeps machines in such segments both isolated from the Internet and the LAN segment(s). You can also have multiple, load-balanced WAN interfaces, advanced routing capabilities, and some very high-level networking magic can take place.
m0n0wall is pretty much everything that is beautiful about corperate-grade commercial firewall firmware except that it’s free, open-source, and will run on nearly any hardware. That means you can have a router which is better than a $1000 PIX for about $200, or a router which is better than a $10,000 PIX for about $1000. It’s also easier to use than a PIX, and doesn’t require the firewall admin to have any expensive certifications just to write a few firewall rules or turn on traffic shaping features. Really, there’s no downside (unless you think open-source is the face of the communist devil or something.
Then again, even IOS [Cisco’s core operating system] is the child of BSD UNIX, so in that case maybe it’d be better to just buy an expensive, bloated, insecure, unstable, poor-performing, high-maintenance ISA server from Microsoft instead!
)