I have a Zyxel P660R-D1, running PPPoA in half-bridge mode, connected to a WRT54GL running tomato firmware. My initial problem was that the NAT function in my zyxel was very bad, the iptable was being filled up, and not cleared until 3 days later. To get rid of the double NAS setup, and take use of the NAT functionality in the WRT54GL, I set the Zyxel to run in half-bridge mode, and now the WRT54GL has my public ip. So far so good. Now the ARP table gets filled up quickly, because each new connection is apparently getting a mac-address. Luckily mstombs had the answer! It is now working perfectly! The solution was simply to add these commands in the firewall script:
Thanks Excellent, thanks for that information trezno. I have exactly the same modem/router running half bridge connected to my WHR-HP-G54, I too have noticed the connections table full of strange MAC addresses coming from the Zyxel for each and every connection. I will give this solution a try later. Thanks again. Steve
Glad its fixed for you trezno, I have seen this problem before for example http://www.linksysinfo.org/forums/showthread.php?t=55692 and experienced it myself by running D-Link 320T firmware on my Linksys ADSL2MUE. For another analysis of the problem and solution see http://www.csc.liv.ac.uk/~greg/projects/dlink.html
Just tested the above solution, and can confirm it works for me too. Have been looking for a solution for this for a while now. Thanks again mstombs/trezno