Yep, I've actually got some of the fanless guys branded as "protectli" or something like that around the office, I didn't know there were generic ones on aliexp

Yep, I've actually got some of the fanless guys branded as "protectli" or something like that around the office, I didn't know there were generic ones on aliexpress - that's a good link, thank you. And yep, I've only ever used dd-wrt, never openwrt directly, so not sure about that, but I've no desire to hand edit iptables rules or anything like that - I'll take a GUI any day.