As of 2014, the Commotion firmware will get an IP address from the home router, and happily route to anything inside the home network, because usually the Commotion node is not isolated in a separate VLAN in the home network.
We need to document how to change the Commotion node's firewall to block mesh and wifi traffic from reaching the home network, yet leave internet access alone (masquerading).
Additionally, it should be explained how to expose a single IP address and port, to allow for sharing a web server, for example.