> We have some good starting points for access control, but 
> there is obviously work necessary there. Does anyone have a 
> good handle on the firewalling rules necessary for bandwidth control?

I'm a Network Security Engineer, I think I have a handle on it.  :)

Jay