CAUTION! LOW FLYING DATA.

I'm thinking of picking up a new wireless router, partly because I am putting more devices on the wireless net. Right now, my wireless network is publically accessible, and I like that, but I would like to have a private segment.[1]

So, here I am trying to list what I want in a wireless router:

1. at least 4 100/1000 ethernet ports
2. ability to have a guest network, ideally password-free, that has limited access (or no access) to the main wireless network.
3. ability to filter based on mac address - to hell with you, DEADDEADBEEF, no network for you!
4. ability to filter based on destination ip/port (in particular, I want to filter out most but not all tcp/25 traffic)
5. ability to handle specific inbound connections and hand them off to different hosts. (eg, tcp/8080 goes to 192.168.1.100, tcp/8081 goes to 192.168.1.101, etc)
6. not too expensive - I don't necessarily feel the need to get one of the wifi models of, say, a juniper ns5.

Suggestions/thoughts/opinions, anyone?

[1] yes, I know, "wireless security" can be defeated blah blah blah. In other security news, while the doors of my house have okay locks, the windows can be shattered and the walls are vulnerable to sawzalls.