So you can write rules to limit access to your internal network fromwireless subnet. Attaching a wireless AP to the same subnet is asking fromtrouble.