I decided to get me a Firewalla Gold firewall device, it has it’s pros and cons one of them being the IP’s you can’t directly give IP’s to services, IRC tends to not play nice without modifying to use the internal IP. BUt it still blocks SSH and has some nice graphs and such. New releases are slow and it could possibly be a simple pf frontend if I took some time to hack it.

But so fare I am happy with it.