Depends on how handy you are.
You just have to make sure you using gigabit at your network edge now. I use old PC's for my firewalls built off of smoothwall (snort, clam AV, qos, ntp, dhcp, [multi IPs with Homebrew full firewall control mod]...etc) . really low specs needed...
I had to grab...