I run a CentOS box with Shorewall as the iptables wrapper as my router/firewall.

We must be kindred spirits because I was running some ancient version of Tomato that i loved on an old buffalo AP only to find Tomato had basically died.