I've been doing a lot of research lately about Firewall+VPN Appliances. My god do these companies make a lot of money off of their customers. You have to buy the hardware, buy the support contract, and last... if you don't like it, you can't return it! So, the question has been raised. A Firewall+VPN Appliance is nothing but a hardened linux kernel running iptables + some vpn server. It has a minimum of 3 network cards... blah blah blah. Has anyone here built a solid home brew replacement for the likes of a Watchguard Firebox or Cisco Pix (two compleatly different levels of firewalls)? If so: what distro did you start with? how did you harden the kernel? are you administering the machine through command line, or is a remote adminsitration tool availible? in the end, was it worth it to build your own?