I have a small home server to share photos, blog, videos, etc. with family and friends around the US and Western Europe. Of course I have seen evidence of malicious scanning against my network/server.
I'd like to set up a ruleset to only allow NAT forwarding for a select group of IP address ranges that I trust. The AirPort Extreme doesn't have this feature. Do I need to buy a firewall at $400 plus subscriptions, or will a small switch ($150) meet the basic needs?