Firewall Distros

I have been using IPCop for a long time and think it is a fantastic 
product. However, it lacks the ability to do any kind of email virus 
scanning/attachment blocking. So, I'm now looking for a Linux distro 
that has the following features:
1) iptables firewall support (Shorewall would be nice but isn't essential)
2) POP3 mail proxy to allow centralized attachment blocking (by specific 
extensions, e.g., pif, scr, exe, etc...) and virus scanning with 
something like ClamAV
3) Spam filtering with something like POPfile (available as an add-on 
for IPCop) or SpamAssassin.
4) Transparent proxy/caching server using Squid. This comes in very 
handy at locations with slow Internet connections when you need to run 
things like WindowsUpdate.
5) VPN (IPSec) - straightforward configuration would be ideal
6) Port Forwarding (easy to configure)
7) Intrusion detection
8) DMZ support if a third NIC is added
9) DNS proxy/caching
10) SSH server (for remote administration)
11) HTTP/SSL if there's a web GUI (for administration)
12) P2P blocking using something like ftwall:
http://www.lowth.com/p2pwall/
13) Ability to backup configuration over a network
14) DHCP server
15) DansGuardian support (would be nice but isn't essential)
16) Detailed logging ability

IPCop provides all of the above except POP3 mail proxy. The VPN 
configuration with IPCop is a bit of a pain, so a distro that offers an 
easier means of configuring VPN would be nice.

Here are the distros I have downloaded to test:
Astaro Linux
BlackRhino
ClarkConnect Home Edition
e-smith Linux
EnGarde
Lonix
M0n0wall
Redwall
Securepoint Linux
Sentinix
Smoothwall (yes, I know IPCop spawned from this)
Zenix
Zeus
Devil Linux (runs off CD)
Sentry Firewall CD (runs off CD)

Due to the fact that I don't have a great deal of time to test all of 
them, I was wondering if anyone has experience with any of them and can 
give me their comments, recommendations, cautions, etc...

I have already started testing Astaro and it's very nice. The POP3 proxy 
was a piece of cake to configure and the web interface is very nice. I 
haven't tested VPN yet but it looks easier to use than IPCop's VPN 
(hopefully this will change when IPCop 1.4 is released).

Any feedback would be greatly appreciated! I will also post my comments 
once I've had a chance to test several of the distros above.

Thanks!

-sr
_______________________________________________
LinuxManagers mailing list - http://www.linuxmanagers.org
submissions: LinuxManagers-35TzE1X9F6582KRnZfj+bdi2O/[email protected]
subscribe/unsubscribe: http://www.linuxmanagers.org/mailman/listinfo/linuxmanagers