Paul,
you are correct that IP masquerading and ipchains is the answer to
your problem.
Please consult the excellent documentation. Should you have any further
queries, we will be happy to assist.
Mike Holland <mike at golden.wattle.id.au> Perth, Australia.
--==--
The early bird may get the worm, but the second mouse gets the cheese.