Comment If you don't want to roll your own... (Score 1) 579
Bradford Networks has a SuSE Linux-based system of network policy enforcement. We use it at Bloomsburg University and it's pretty well eliminated our ResNet virus problem.
Aren't you glad you're not getting all the government you pay for now?