I'm going to build a WiFi-Hotspot. Currently i'm using Coova Chilli with MySQL and FreeRADIUS. However i'm not that pleased with Coova Chilli.
So i thought about a replacement using Squid. Authentication against FreeRADIUS should work. But i do not only want the customer to be able to access HTTP/HTTPS/FTP but also to check and send mails over various protocols (POP3, SMTP, IMAP, ...). But since squid can't act as such a proxy, i need to choose another way.
As squid provides post-authorization helpers, i think it should be possible to active some iptables-routes for a specific client, is it? And is there also something like a session-timeout or logout helper for disabling the iptables rules i've set before?