Since we first started talking about using the browser as an authentication tool in December 2000 OpenSource implementations have started to appear. Here is a list of all the software I know of that implements either a CaptivePortal or an ActivePortal solution.

Open Source

• [http://www.myzona.net/opensplash/ OpenSplash] - It utilizes Perl to manipulate ipfw rules. Apache is needed.

Right now there are not many features, for example no time limiting, no proper authentication, and rules need to be flushed manually if required. But it does its job well for now. The idea is to show a User Agreement / TOS page before anyone can access the internet.

• [http://nocat.net/download/NoCatAuth/ NoCatAuth] -- Written in perl, supports Linux/iptables and OpenBSD/pfctl. GPLed. Supports authenticating modes against an auth service with a wide variety of backends, including a MySQL database, PAM, RADIUS, LDAP, and more. Also features a non-authenticating "open mode" that merely requires a user to accept an AUP before they can log in. This project is more or less seeking a new maintainer.

• [http://nocat.net/download/NoCatSplash/ NoCatSplash] -- Written in C, currently under heavy development. Intended to be the successor to NoCatAuth, the gateway process and all its data files fit within 200-250k, making it ideal for embedded environments.

• [http://www.cc.saga-u.ac.jp/opengate/index-e.html]Opengate developed at Saga University (Japan)

• GPLed, runs on FreeBSD. Uses a Java applet to keep the connection open, and ftp or pop3 servers for an authentication back-end. (added by Jim Thompson)

• MetaNet by ErikWalthinsen. Still in early beta but it will provide an entire network application framework rather then just a CaptivePortal solution.

• WiCap by BrianCaswell - Written in Perl and runs under OpenBSD. I believe this is what NovaWireless will be deploying.

  • http://www.geekspeed.net/wicap/

• River of Stars' wireless heartbeat implementation (presently most usable on an OpenBSD gateway)

  • http://www.river.com/tools/authhb/

• [http://www.lanroamer.net/soholanroamerdevframe.html LanRoamer] (Linux 2.4.x)

  • Based on the Linux 2.4 kernel and GPL'd. (Name changed to LanRoamer by Jim Thompson)

• [http://slan.sourceforge.net/ SLAN]

  • A GPL'd captive portal implementation using VPN technology. Has Linux and Windows clients.

• [http://ceres.unit.liu.se/netlogon-devel/ Netlogon] by Kent Engström at Linköpings University

  • Not much known, a basic captive portal solution.

• [http://www.itlab.musc.edu/~nathan/authentication_gateway/] by Nathan Zorn

  • Uses a PAM module to insert an iptables rule. Very simple and effective. (Added by LimAko).

• [http://software.stockholmopen.net/index.shtml StockholmOpen] by the Royal Institute of Technology in Stockholm, Sweden

  • This system is also operator neutral, allowing different users to connect through the access network to different upstream providers. Implementation in C, uses PAM, Linux/FreeBSD. BSD License. (Added by MartinHedenfalk).

• [http://www.myzona.net/opensplash OpenSplash] by Aleksandr Melentiev from San Francisco Wireless - Inspired by the simplicity of wicap, intended to run on FreeBSD by utilizing Perl and ipfw. Doesn't provide much functionality, other than a simple AUP agreement.

Commercial or Proprietary

• Aptilo's Captive Portal

  • http://www.aptilo.com/pages/main/solution/mobile.htm

• Cisco's [http://www.cisco.com/univercd/cc/td/doc/product/dsl_prod/6400/feat_gd/12_1_5/ssg.htm Service Selection Gateway]

• [??]

  • Starbucks has a CaptivePortal solution of some sort. Anyone know the details?

  • Yeah, its Cisco's Service Selection Gateway -- Jim Thompson

• [http://www.mschoice.com/ MS Choice] (site requires IE5) Microsoft's testbed for the Starbucks Deal.

  • "To prevent such unauthorized access and hacking, OIT developed its own authentication program requiring wireless users to log in through a web browser before access to the Internet is granted. If a user's connection is inactive for a certain amount of time, the authentication system closes the user's access, deterring potential hackers from taking advantage of the connection."
  • Not quite true. The Starbucks deal was Mobilestar, and there was precious little Microsoft content in the deal (or company). --Jim Thompson

• [http://www.news-info.gatech.edu/news_releases/lawn.html Columbitech's Wireless VPN ]

  • "... enables mobile professionals to access mission-critical data on the corporate LAN from all major handheld devices, with optimized performance and true end-to-end security from application to application. In addition, Columbitech's solution offers a secure always-on experience. Columbitech Wireless VPN will also support wireless network roaming."

  • http://www.columbitech.com/products/productsWVPN.asp

  • [http://www.nas.nasa.gov/Groups/Networks/Projects/Wireless/index.html NASA's Wireless Firewall Gateway]

    • A solution using Openbsd, PHP, IPFilter and Apache. There is no source available that I know of.

• [http://www.wayport.net Wayport]

  • Another solution using Linux, perl IPF, and Apache. No source available --Jim Thompson

• [http://www.surfands.com Surf and Sip]

  • Hack using FreeBSD, perl, ipfw and mini_httpd. No source available --MattPeterson

• [http://www.birdstep.com IPzone] Linux,Apache No source available

-- Suresh Rasaretnam

• [http://www.controlap.com ControlAP] Win*,*nix,MacOS, Zaurus,PocketPC No source available, basic version free. Currently in beta.

[CategorySoftware]