It seems that with the Hotspot setup in 2.9, only web traffic is getting passed - SMTP, IRC, etc. all get blocked (connection failed from the client system).
Is this normal? It's not quite what I was expecting...
Also, it appears the address changing mode has been removed. This will be used for reasonably long-term client authentication, so I was planning to shuffle them over from a "registration IP" to a "actual public IP" that would be routed - this functionality doesn't seem to exist anymore. I'd like clients to have traffic routed to them with all ports open once they authenticate.