Internet access to the other hosts on the network anyway, so it'd be simpler to use IP Masquerading - ICQ works out of the box over ip_masq Niall.