I tried setting it up as a test router and ran smack into their ancient kernel and iptables not supporting statistics drop mode.