only put the captive portal on 80/443. Everything else (except for 
blocked ports) just works without the captive portal. Haven't tried this 
configuration (I need to have 20 minutes free to see how it works), but 
this is the now standard way to do public free hotspots...

*D a n a   S p i e g e l*
*s o c i a b l e D E S I G N*  *::*  *www.sociableDESIGN.com 
<http://www.sociableDESIGN.com>*
123 Bank Street, Suite 510, New York, NY 10014
p  +1 917 402 0422  ::  e  dana at sociableDESIGN dot com 
<mailto:dana at sociableDESIGN dot com>


Rodman Frowert wrote:

>I am not sure I understand here.  Redirect 80/443 to where?
>
>Rodman
>
> 
>  
>
>>Otherwise, I'd leave everything else open. Also, you might want to only 
>>redirect port 80/443 since those are the only ones where you can see the 
>>TOS. This will allow newer Wi-fi VOIP phones to work without having to 
>>go through the captive portal (which they obviously can't do without a 
>>proper screen).
>>
>>*D a n a   S p i e g e l*
>>*s o c i a b l e D E S I G N*  *::*  *www.sociableDESIGN.com 
>><http://www.sociableDESIGN.com>*
>>123 Bank Street, Suite 510, New York, NY 10014
>>p  +1 917 402 0422  ::  e  dana at sociableDESIGN dot com 
>><mailto:dana at sociableDESIGN dot com>
>>    
>>
>
>
>
>---------------------------------------------------------------------
>To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
>For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>
>  
>