Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm going to build a WiFi-Hotspot. Currently i'm using Coova Chilli with MySQL and FreeRADIUS. However i'm not that pleased with Coova Chilli.

So i thought about a replacement using Squid. Authentication against FreeRADIUS should work. But i do not only want the customer to be able to access HTTP/HTTPS/FTP but also to check and send mails over various protocols (POP3, SMTP, IMAP, ...). But since squid can't act as such a proxy, i need to choose another way.

As squid provides post-authorization helpers, i think it should be possible to active some iptables-routes for a specific client, is it? And is there also something like a session-timeout or logout helper for disabling the iptables rules i've set before?



share|improve this question
In case you haven't thought of it: If you're not proxying the other protocols you want to forward at layer 7 (like you are w/ HTTP(S)/FTP w/ Squid) then you're really just opening up all protocols to the world (since you can tunnel anything over TCP). –  Evan Anderson Oct 6 '10 at 13:21
Well, indeed that's an argument. After some hands-on-google i've found that monowall provides a captive portal. That should do the trick. Thanks! –  macs Oct 6 '10 at 16:20
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.