How do I set up an insulating gateway?

[Brian Kantor]

Or compile the kernel with the "ipforwarding" variable turned off, eh? 
I suppose you could poke it with ADB if you don't have source.