Your shield is an intrusion prevention system running
Snort doing real time packet analysis on your network. This level of deep packet inspection is commonly found on enterprise networks so you have a huge layer of protection I would NOT take off.
Running the latest OpenWrt stable release