squid also has redirectors and c-icap filters etc, firewall wise it uses the OS(e.g. iptables), so it's more than a proxy but it does not do packet-level-firewall as it depends on iptables.

looks like zorp is a all-in-one solution, hope i have time to play with it soon