I am using PFSense, been using it for several months with great results. My ports are only open to the addresses of my trunk providers, no one else.
Little tricky to set up and get used to, but it is free, works good and is highly configurable.
Just my two cents for what it is worth…