I collected a few old network cards and installed them in an old computer with reasonable power draw.
It turned out rather painless to set up an OpenBSD/pf firewall. I am currently adding rules and testing. One of the network cards seems to malfunction, one danger with random hardware.
Extra interfaces allow more finely grained policies.
