m0n0wall Captive Portal - Links to Existing Implementations & Thoughts
A little googling reveals a few FreeBSD captive portals:
http://www.cc.saga-u.ac.jp/opengate/index-e.html http://opensplash.qalab.com/ http://software.stockholmopen.net/index.shtml
and a bunch of others (not necessarily FreeBSD based) at:
http://www.personaltelco.net/index.cgi/PortalSoftware
I admit I'm out of my depth here when it comes to the level of hacking required for this, but I figure I know enough to be dangerous and can kick start this conversation, so here goes...
Manuel asked here:
Did you check that it fits in with the rest of m0n0wall without requiring a complete overhaul thereof? I mean - you know that ipfilter doesn't do layer 2 filtering, and that ipfw has got a kinda "reserved" function for the traffic shaper, which must work no matter if the captive portal is on or off. Same goes for other functions like VPN etc. of course.
Two different ways I've heard of implementing captive portals are:
1) change the filtering rules to re-direct newly leased IPs to a specific page, then reset the rules when they're approved
2) change the DHCP server to initially supply very short leases in a different, walled-off, subnet and then provide a new IP when they're approved.
One problem with (2) is that someone might simply create their own static IP in the right (2nd) range, but if (1) proves hard, maybe its a good 80% solution?
I think NoCatSplash is an example of (1), http://nocat.net/download/NoCatSplash/.
Perhaps a better starting point is http://www.geekspeed.net/wicap/, which is a captive portal that runs on OpenBSD (presumably closer to FreeBSD than Linux?).
Btw, for those new to m0n0wall, read the full description of its FreeBSD based underlying software and configuration.
So Cal Free Net.org
Comments
Post new comment