You didn't read what I wrote. Don't install a Linux. Install a OPNsense firewall, which is a complete VM, and is based on BSD. But it's super easy to use and operate, bullet proof for these kinds of usage: https://opnsense.org/