Thanks for the pointers. I was thinking about that path too since a firewall distro would let me do some neat stuff with squid and ad/content filtering without having to install adblock on every machine. Just out of intellectual curiosity, if I wanted to do it with vlans how would it work?