I am running SUSE v10.0 and 1st a basic undestanding of my network. My ISP is Direcway which provides the internet connection via satellite. The modem provides DHCP service with a network of 192.168.0.1/255. The modem is connected to my Linksys WRT54G router on the WAN port. The router has a IP address of 192.168.1.1 I have installed a captive portal for the wireless side so that wireless clients can connect however they are suppose to be redirected to a radius server on the internet for authentication. The captive portal has a built in DHCP and I have disabled the DHCP on the router. In order for the connect to be secured the connection is made through a tunnel. The following is a .sh script that i use.

/usr/sbin/iptables -I INPUT -m state --state NEW -i tun0 -j ACCEPT
/usr/sbin/iptables -I FORWARD -m state --state NEW -i tun0 -j ACCEPT
/sbin/insmod tun.o
/bin/sleep 10
/usr/local/bin/chilli -c /usr/local/etc/chilli.conf
/bin/echo "interface=br0
`cat /tmp/dnsmasq.conf`" > /tmp/dnsmasq.conf
/bin/echo "interface=tun0
`cat /tmp/dnsmasq.conf`" > /tmp/dnsmasq.conf
/bin/sleep 5
/usr/bin/killall dnsmasq
/usr/sbin/dnsmasq --conf-file /tmp/dnsmasq.conf
/usr/sbin/brctl delif br0 eth1

The wireless client can connect however, they never get to the radius server for authentication. If anyone has a good knowledge of the iptables I think that is were the problem might lie.