What I need is just gateway managment. I have a network with about 20 workstations 10 of wich I want unrestricted internet access and the rest restricted to only certain domain. I was going to use chillispot a captive portal for wifi hotspots for this but I need to keep my current DHCP server (I don't want the network relying on the gateway) and I have not been successful with getting the anyip feature to work.

I would like it to be authenticated by MAC address then be able to override it with a U/P to gain full internet access.

I have looked at other captive portal but I have not found one that allows a seperate DHCP and allows you to specify domains that don't require authentication.

Hav you looked into Squid. It is a internet proxy that kinda does what you are looking for. I am not sure about MAC filtering though. Anyway google Squid and take off

what about management abuse?

I have thought about squid and then using group policy's in AD to set the proxy setting to allow admins to have full access. I believe I would have to setup 2 differ proxy servers for this (I have never set one up)

about management yea they probly abuse it but that is sort of their luxury of being management (and they sign my check)

so you are saying that management is always right? that they can do no wrong? is that it? what about your fiduciary responsibility to the stock owners? they don't get consideration for fronting the money?

I am not familar enough with squid to tell you how to do it, but all you should have to do in create 2 groups on the squid box. 1 for full access and the other for limited access. google "squid contol lists" I wish i could help more, but I think squid is your ticket.

Not right but stock owners don't make decisions on who has what internet access and in this paticular situation thats not really an issue considering management is only of 10 people that get their work done. Witch is what make all owners their money also. as to were employees with unfinished work == loss of customers, management running a day behind == no loss

well squid here I go I am going to do some reading and run a test box.