> > Is there currently a way to do NAT of outgoing packets (from my host > running NAT, not rouiting) based on the UID that owns the process that > is generating the outgoing traffic?
If you're willing to use OpenBSD, with 'authpf' you can add NAT or packet filtering rules on the fly, once users have authenticated themselves to the gateway with 'ssh'. See http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&apropos=0&sektion=0&manpath=OpenBSD+3.2&arch=i386&format=html David S. >
