. Don't ignore the fact that if the router is uPnP capable, your need for static port forwards decreases dramaticly.
. The WRT54G and WRT54GS with Sveasoft firmware has full IPTABLES support, and you would be limited only by router free RAM to hold a very large table.