Index: /branches/releng-9.0/nanobsd/files/etc/dhclient-exit-hooks
===================================================================
--- /branches/releng-9.0/nanobsd/files/etc/dhclient-exit-hooks	(revision 10586)
+++ /branches/releng-9.0/nanobsd/files/etc/dhclient-exit-hooks	(revision 10586)
@@ -0,0 +1,18 @@
+#!/bin/sh -
+#
+# An normal proxy should not have an defaultrouter configured, as all calls to
+# the outside world are handled via PF redirects.
+#
+# Rick van der Zwet <rick@wirelessleiden.nl>
+
+. /etc/rc.subr
+
+: ${service_proxy="NO"}
+: ${service_ileiden="NO"}
+
+load_rc_config 'ileiden'
+
+if checkyesno "service_proxy_normal" && checkyesno "service_accesspoint"; then
+  warn "Removing default route as machine is marked as service_proxy AND service_accesspoint"
+  route -q del default
+fi