I've tested ebtables on the 2.6 kernel VPN builds and they seem to work great. However, on a WRT54G-TM, there's very little JFFS left over, especially after storing a handy copy of tcpdump in JFFS. I would like to use ebtables to protect wired clients from guest wireless clients, especially since there's no GUI support for vlans and multiple SSIDs. I realize DD-WRT offers this but for variety of reasons I'd rather use Tomato.
It looks like there's an ebtables patch for 2.4 kernels (http://ebtables.sourceforge.net/downloads/latest.html). Is there a chance this could be included? There's a lot more JFFS available on the 2.4-based VPN builds.
BTW, SNMP would be a nice addition too for remote MRTG graphing.