Learning is your weapon
DaveB has a very workable system, with one major flaw if he ever decides to run Elite on an Xbox on the same collision domain - as it constantly spams the LAN for cable length
No consoles in this house now the kid has moved out. I simply cannot handle a gamepad style controller - I've got big hands with long fingers (playable span octave+3 on a piano) and I cramp up using a gamepad for more than 2 minutes, it just isn't comfortable to scrunch down on that small device.

However, before he moved out and his PS and XB WERE on the LAN, I assigned them a static IP and added rules to the snort box to ignore them

My networked laserjet is "noisy" too and so I've done the same for that. Spamming the LAN from inside isn't an issue for the firewall box as the internal interface is "trusted" unlike the external and DMZ interfaces that are locked down tighter than a gnats chuff. Internal only has minimal block-rules, mostly blocking and alerting on any outbound traffic to a netblock on one of my naughty lists. Old-school unix geeks take no guff from misbehaving hardware, they just script around the problem or junk the bad kit
