Wondering if anyone has had any real luck with configuring protocol filters on APs- looks like the ethertype filters are pretty limited. Lets say I have a group of wireless users that are infected with gaobot (or whatever), and I want to block traffic on a certain tcp port at the AP- can this be done? My WLSE could push the config to my devices, if I could figure out where or how to put a port-based filter (beyond the limited list of supported ethertypes that I can dig up in old 350 docs). Am I off in left field, or is this doable? The attached switches would be another point of acl-style control, but don't have that easy of a way to push configs like with WLSE...