Port Forward Cloudtrax clients

[Bcodom]

Greetings!

I wanted to get some ideas on how we can best implement this.  We've had pfSense set up to forward all traffic through DansGuardian, but our staff has asked us to put it just through just our public wifi.  All traffic is going through one interface (off the usual LAN address), and there are two wifi connections: Public and Private.  We use Open Mesh Cloudtrax to manage the public wifi in our building, so when clients connect to the public APs, they receive a 10.254.X.X/10.255.X.X address, rather than the usual 192.168.1.X address.

I'm wondering if there's a simple way to forward NAT traffic of just the public wifi clients through the DansGuardian filter, and leave the rest of the network to just bypass it.  I've already tried adding NAT rules to just the IPs of the public APs, but that hasn't proved to do anything.

Thanks!