I connected with WRT54G- Tomatoes 2 building by WDS, it works like a charme, like Tomato. All Clients are in the same subnet and everything worked fine. Now the 2nd Building has an own internet router in the basement with his own DHCP server (Both of them are working in different ranges), and now it depends on luck for the clients from which DHCP server the lease is gathered. So I tried a firewall script IPTABLES -A INPUT -p all -s 0.0.0.0 --sport 68 -d 255.255.255.255 --dport 67 -j DROP IPTABLES -A FORWARD -p all -s 0.0.0.0 --sport 68 -d 255.255.255.255 --dport 67 -j DROP to cut off the DHCP transmission on the WDS bridge, but this is not working. The Tomato on the roof of the 2nd Building has the WAN Port is unused. Question to Comminity: How can I assign the (internal) WLAN interface of this router to the WAN- port, so that the iptable- commands can be used? Thanks for all assistance.