>If you are looking to isolate machines from each other it might be worth
>seeing if your switch supports private VLANs. The idea behind this is that
>devices on each port on the switch can only see the default gateway (the
>m0n0wall which sits on a promiscuous port that is seen by all the other
>ports in the VLAN), whilst at the same sharing the same subnet.
Good idea. This would be a much easier way to do this. I believe you are
referring to port-based VLANs as opposed to 802.1q VLANs. I have done this
in a test environment in my office with much success. This would allow
Jurgen to use one OPT on m0n0 and a single DHCP server.