thanks, that's a good idea. the historical accident of how things ended up connected as they are means it's non-trivial to do right now. but i guess i should have it as a long-term goal.

[edit: i do understand what you mean; but currently this is implemented just as a wifi endpoint (no router - just wifi) on an internal network and some iptables rules.]