Now that I think about it, there are lots of ways to interpret that but my meaning was for businesses, I would basically do an in line transparent firewall much like this example:
http://pfsense.trendchiller.com/transparent_firewall.pdf For the normal firewall deployment, I mean exactly that. Treat each of those homes as an individual computer, filter bad incoming stuff to them and do some basic egress filtering to keep them from giving out info they don't need to be giving, or SPAM for that matter. Additionally for any type of traffic that you specifically permit, I would log it. Just my $.02 worth. Curtis
