I have eth0 for administration, and vlans eth0.2 eth0.3 and br0 for resource seperation. My esternal interface is ra0. each internal interface is on a seperate subnet, and I have dhcpd giving connecting devices ip addresses out of their assigned network. I want all of the devices to be able to access the internet through NAT, and I need to allow them to communicate with port 80 on eth0's subnet eth0 10.0.0.0/24 eth0.2 10.2.0.0/24 eth0.3 10.3.0.0/24 br0 10.4.0.0/24 -ben