Since we first started talking about using the browser as an authentication tool in December 2000 OpenSource implementations have started to appear. Here is a list of all the software I know of that implements either a CaptivePortal or an ActivePortal solution.

Open Source

• NoCatAuth, an alpha quality Catch-and-Release implementation in Perl. Uses SSL, gpg, and Linux 2.4.x + iptables. GPL'd.

  • http://nocat.net/

• MetaNet by ErikWalthinsen. Still in early beta but it will provide an entire network application framework rather then just a CaptivePortal solution.

• River of Stars' wireless heartbeat implementation (presently most usable on an OpenBSD gateway)

  • http://www.river.com/tools/authhb/

• [http://www.lanroamer.net/soholanroamerdevframe.html LanRoamer] (Linux 2.4.x)

  • Based on the Linux 2.4 kernel and GPL'd. (Name changed to LanRoamer by Jim Thompson)

• [http://slan.sourceforge.net/ SLAN]

  • A GPL'd captive portal implementation using VPN technology. Has Linux and Windows clients.

• [http://ceres.unit.liu.se/netlogon-devel/ Netlogon] by Kent Engström at Linköpings University

  • Not much known, a basic captive portal solution.

• [http://www.itlab.musc.edu/~nathan/authentication_gateway/] by Nathan Zorn

  • Uses a PAM module to insert an iptables rule. Very simple and effective. (Added by LimAko).

• [http://software.stockholmopen.net/index.shtml StockholmOpen] by the Royal Institute of Technology in Stockholm, Sweden

  • This system is also operator neutral, allowing different users to connect through the access network to different upstream providers. Implementation in C, uses PAM, Linux/FreeBSD. BSD License. (Added by MartinHedenfalk).

• [http://www.openbsd.org/cgi-bin/man.cgi?query=authpf&sektion=8]

  • A shell in openbsd (added in 3.1) which can change filter and translation rules for a source IP. I haven't tried it yet. (Added by LimAko).

• [http://www.cc.saga-u.ac.jp/opengate/index-e.html Opengate] developed at

  • Saga University, GPLed, runs on FreeBSD. Uses a Java applet to keep the connection open, and ftp or pop3 servers for an authentication back-end. (added by Jim Thompson)

Commercial or Proprietary

• Aptilo's Captive Portal

  • http://www.aptilo.com/pages/main/solution/mobile.htm

• Cisco's [http://www.cisco.com/univercd/cc/td/doc/product/dsl_prod/6400/feat_gd/12_1_5/ssg.htm Service Selection Gateway]

• [??]

  • Starbucks has a CaptivePortal solution of some sort. Anyone know the details?

• [http://www.mschoice.com/ MS Choice] (site requires IE5) Microsoft's testbed for the Starbucks Deal.

  • "To prevent such unauthorized access and hacking, OIT developed its own authentication program requiring wireless users to log in through a web browser before access to the Internet is granted. If a user's connection is inactive for a certain amount of time, the authentication system closes the user's access, deterring potential hackers from taking advantage of the connection."

• [http://www.news-info.gatech.edu/news_releases/lawn.html Columbitech's Wireless VPN ]

  • "... enables mobile professionals to access mission-critical data on the corporate LAN from all major handheld devices, with optimized performance and true end-to-end security from application to application. In addition, Columbitech's solution offers a secure always-on experience. Columbitech Wireless VPN will also support wireless network roaming."

  • http://www.columbitech.com/products/productsWVPN.asp

• [http://www.nas.nasa.gov/Groups/Networks/Projects/Wireless/index.html NASA's Wireless Firewall Gateway]

  • A solution using Openbsd, PHP, IPFilter and Apache. There is no source available that I know of.

[CategorySoftware]