In light of the problems seen with router and stateful firewall, the only solution that remains to check the problem of distribution of the Internet to the local network is to use a proxy, perhaps in a transparent way to avoid having to configure each client or distribute WPAD.
It is located in a convenient and efficient network that allows us to use a Squid proxy without wasting much time for setup, which integrates access control and traffic and many other features that can be added with convenient plug-ins. The solution in question is IPCop.
The convenience of this software is all in the speed of implementation: once installed because the system is up and running, and just add the plugins you want.
IPCop uses Linux 2.4, iptables, Squid (already in the default), SquidGuardian, ClamAV, and others, as the plugin installed. How
plugins council to take a look at the site mhaddons which contains, in the Downloads section, a number of additions almost indispensable. Among these Layer 7 filters are useful if you want to use traffic shaping at the level of application protocol, or if you want to block certain types of traffic (eg P2P, see "p2pblock" in mhaddons). If you want to install the filters should be replaced with a kernel of IPCop that integrates them. Instructions on the site at Layer7 blocker.
is to be noted that the choice of blocking P2P is not very effective due to low efficiency pattern recognition.
