Take a look at setting up a Linux bridge. I've done this before and its not too tough. You can basically configure a m/c with two interfaces to act as a transparent bridge. You don't need to assign any IP addresses to the bridge's interfaces (saving you IPs), and the bridge can do HTTP proxying too i.e. although it does not have IPs it can do filtering on the IP level.