As a webserver I used to run a win2k3 server, IIS6 but also ran Kerio winroute on it. Winroute can do everything you want (firewall, NAT, load balancing including AV and even bandwidth and site restricting) but only needs a 1Ghz PC so ideal for that old motherboard everyone has in the cupboard
