Hardware + Software Router + OpenBSD DHCP / NAT

[Christopher Nehren <apeiron_(_at_)_comcast_(_dot_)_net>]

Currently I have a cable modem in my house which feeds into a router.
This router distributes the modem connection via DHCP to a few machines
on my home network. I have an old machine running OpenBSD, and I'd like
to know what a good (I suppose "best" would open a flame war?) solution
would be, in order to increase my home network security using the
OpenBSD system. I'm thinking of something like this: (please excuse my
pitiful attempt at ASCII art)

cable modem
	|
	|
	|
router with the OBSD's system set as the DMZ
	|
	|
	- first ethernet interface on the OBSD machine
OpenBSD system running DHCP / NAT + PF
	- second ethernet interface on the OBSD machine
	|
	|
hub / switch
	|
	|
client A / client B / client C ... / client Z


Would this work? Would it be more secure to have the modem go to the
OBSD box, then to a router, and then route the connection to the
machines on the network? My main (only) concern with this setup is the
security of my home network.

[demime 0.98d removed an attachment of type application/pgp-signature which had a name of signature.asc]