Help with Access Point firewalling

[Steve Comfort <steve@4Dllc.com>]

Hi all,

I'm working on an embedded scenario that has got me a bit stumped, and 
thought maybe one of the guru's here could help out.

The device is based around an IXP processor and has an ethernet and a 
wireless interface. When the wireless interface is configured as managed 
(ie its a client) I have no problem and am happily using a modification 
of Oskar Andreaason's firewall script to do the firewalling. Everything 
works fine.

However, what should I be doing if the device is configured as an Access 
Point? I figured I need to allow in NEW TCP connections, but don't know 
whether I will be able to use iptables to masquerading between the wlan 
port and the eth port, (ie will the MASQUERADE target forward packets 
received on the WLAN to the ETH interface ?) or whether I will have to 
add a bridge and use ebtables?

Any advice would be appreciated!

Best regards
Steve