[Wylug-discuss] Read-only Firewall/Router Kit and Distro Advice Wanted

[Dave Fisher]

It's time to replace an ageing Debian based internal router/firewall
running on a Mini-ITX board.

I'm looking for something smaller, tidier, and possibly less
configurable.

It will sit on the inside edge of my DMZ and all it has to do is NAT and
block all incoming requests bar SHH. 

ADSL, wireless etc are _not_ wanted.

Some time ago there were loads of little/cheap off-the-shelf commercial
routers that could run a tiny firewall/router distro off a usb stick or
CD.

I've lost track of what's available and usable in terms of hardware and
software.

Could anyone with recent buying and configuration experience recommend
something?

Dave