# I don't think that's a very workable solution. How do you enforce that
# routed will listen on the internal interface only?
Filtering UDP port 520 on input, with interfaces
explicitly specified. Probably output, too?
# routing on the firewall is trivial:
# Internal class B -> internal router
# Default -> external router
That's probably the exact thing people are doing.
With best regards -- Andrew Stesin.
+380 (44) 2760188 +380 (44) 2713457 +380 (44) 2713560
"You may delegate authority, but not responsibility."
Frank's Management Rule #1.