Firewall/NAT

Hi All,

I've got a m0n0wall setup as a captive portal for a wifi network like this:

WifiClient
 |
 |
AP
 |
 |
M0n0Wall (Lan: 10.0.0.x, Wan: 172.18.0.x)
 |
 |
Router/Filtering (172.18.1.1)
 |
 |
Internet Gateway (to the www)

This all works great and m0n0wall 'captives' the clients great with it all authenticated against radius. The filtering also works great blocking things and allowing things.

My problem is this. M0n0wall is acting like a modem and doing NAT'in on the LAN->WAN which ofc is right. But in our filtering logs all traffic is coming up as the WAN interface.

Is there a way I can get it setup so the filtering server "sees" the 10.0.0.x address of the original client?

Thanks in advance all

Anyone got any thoughts?

I'd normally just use a dual homed linux box with iptables for the gateway part but I need the captive portal m0n0wall does!