Been a number of years since I last had a nice open source gateway device in place.
Used IPCOP prior and really liked it. Was good for segmenting LAN, like throwing insecure stuff in a VLAN, wifi on another VLAN, etc.
Going back to using something similar since time to segment experiments...