If memory serves me right, Scott Johnson wrote:
> I think this would be a great addition to m0n0wall.
> 
> Have you checked into NoCatSplash for such functionality?
> http://nocat.net/
> 
> I'm not familiar with that project myself, but I've heard many
> good things about it.

From looking at wicap's web pages, it seemed like wicap was written
partially in reaction to nocat being difficult to configure.  As I
recall, nocat requires (at least conceptually) a separate access
controller to implement authentication policies, GPG keys for
authentication, etc.

(I've never actually deployed either one of these, so what do I know?)

Bruce.