Blocking services

On Canopy you can block SMB, multicast, boot p, and a few other services. Is anyone aware of a way to do this on a Catalyst switch or know of any other simple devices that perform this sort of filtering?

Check out Smoothwall, m0n0wall, and MikroTik

I like the look of smoothwall, thanks