I got kilrathi's solution to work routing the traffic to DansGuardian. The only trick was to make sure the router masquerading wasn't applied to the packets being sent to DansGuardian. Initially it was, which meant that DansGuardian saw all packets as coming from the router internal IP instead of th...