Kernel 2.4+ recommends using iptables. ipchains is present only for backward compatibility. In case of iptables the rules can be set based on MAC address. It's DHCP so MAC address is how you identify the user right ??. Mithun