If u are looking for a low budget yet powerful and flexible firewall then use pf in Open BSD with a failover ethernet card. For hardware I suggest using CISCO PIX.