Aaron,
> Another note, it would be prudent to put your ADSL modems onto each of
> their own networks, or better yet (and if you can), run them in
> bridge/modem mode and use pppoe(4) to fire up the connection. That
> way the firewall is on the outside of the network.
I did that for a long time, and it is a maintenance hassle
when switching ISP's, or when the ISP changes something.
I prefer to allow the ADSL modems/routers take care of NAT and
other nitty-gritty related to the specific network they connect
to, and use the firewall as a pure firewall.
Julf