Last time I looked into this, the small Fortinet boxes and the Juniper
NetScreen-5 or -25 were in this class. Juniper now has the SSG to
replace the small NetScreen devices.
I'm using a Fortinet box to do many of the things on your list,
including IPv6 support, at home.