I just implemented a firewall and am trying to decide how to restrict internet access. Right now, ANYONE receiving an IP from the DHCP server will receive internet access. I figured that I could assign atatic IPS from a specific IP range and then grant those static IPS internet access - then I'd only have to assign static IPS to internet users which is not too many users. However, I'm worried that if I assign a static IP to certain users, they will no longer be able to get out on other networks....ie. when they go home and hook up to their dsl router....or hook up to a hotel network etc. Any suggestions...should I flip flop so that the internet users are getting the dynamic IPs?