This is appallingly primitive but it works for all services like Napster ICQ and so on.
[EMAIL PROTECTED]:~$ cat /etc/init.d/firewall echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/ipchains -P forward DENY /sbin/ipchains -A forward -i ppp0 -s 192.168.0.0/24 -j MASQ ipchains is in effect a frontend for netfilter so works on kernels 2.2 amd 2.4 Others may have more sophisticated approaches but if all you need is covered by this, you could use it until you get the clever ones working.

