I am setting up a lab for students to configure and experiment with Linux. I need to set up something that will keep responses to DHCP requests from leaving the lab to keep from driving the network support people crazy. 1. What is the appropriate tool to use? 2. Can anyone suggest an iptables rule that will block either dhcp requests from entering the lab subnet or responses from exiting. 3. I would like to set up one pc running Linux as a router and firewall, filter that also would run DHCP and DNS for the local lab as well as block responses to DHCP requests on the nic that is connected to the campus network. Any thoughts or comments are appreciated. Thanks in advance, Larry Schmitt