SOLVED - I could use some help configuring Tomato UPDATE: the problem below has been solved, heres what I needed to do: 1) set a static route in my cable modem/router to the tomato WAN side. (obvious in hindsight) 2) change the network hosts' gateways to be the tomato's LAN side. (cant believe I didn't think of this earlier, and how come you guys didn't suggest it?) 3) use the masquarade script found below (never would have found this on my own in a million years) I can't believe how hard this was and how many variables there were in the process. But the payoff is sweet, realtime bandwidth monitoring and reporting. I wanted to put my solution here to help someone else in future maybe. I learned a lot in process. Jesus, iptables is a monster. ipfw was so much easier. Thanks for your help community.