Comment If you don't want to roll your own... (Score 1) 579
Bradford Networks has a SuSE Linux-based system of network policy enforcement. We use it at Bloomsburg University and it's pretty well eliminated our ResNet virus problem.
To thine own self be true. (If not that, at least make some money.)