Beta
×

Welcome to the Slashdot Beta site -- learn more here. Use the link in the footer or click here to return to the Classic version of Slashdot.

Thank you!

Before you choose to head back to the Classic look of the site, we'd appreciate it if you share your thoughts on the Beta; your feedback is what drives our ongoing development.

Beta is different and we value you taking the time to try it out. Please take a look at the changes we've made in Beta and  learn more about it. Thanks for reading, and for making the site better!

Ask Slashdot: Setting Up a Wireless Catch-and-Release

samzenpus posted more than 2 years ago | from the you-don't-have-to-browse-at-home-but-you-can't-surf-here dept.

Networking 332

First time accepted submitter SSG Booraem writes "I'm on the IT committee at my church. We've recently added wireless access points to our Family Life Center, but the committee chair isn't comfortable with allowing unrestricted access to our network. We host a lot of guests during the week for Upwards basketball practices and on Saturdays for games, so we want to restrict internet access to the Sunday school classes held in that building. Unfortunately, neither he, nor I, know anything about setting up a wireless catch-and-release like in hotels. If anyone could point me at good documentation, I would be very grateful."

cancel ×

332 comments

Sorry! There are no comments related to the filter you selected.

Really? (-1)

Anonymous Coward | more than 2 years ago | (#38711790)

IT committee in a church? Trying to find God by wardriving?

Re:Really? (0)

Anonymous Coward | more than 2 years ago | (#38712350)

If you're going to try to make a joke, at least make it have sense.

You should feel bad about posting that. It was stupid, and so are you.

Catch-and-release? (-1, Offtopic)

aglider (2435074) | more than 2 years ago | (#38711796)

What's that?>/a> [wikipedia.org]

Re:Catch-and-release? (-1, Flamebait)

Anonymous Coward | more than 2 years ago | (#38711960)

Jesus was a fisherman, didn't you know? It takes years for those hook wounds to heal.

Re:Catch-and-release? (3, Funny)

WrongSizeGlass (838941) | more than 2 years ago | (#38712434)

What's that?>/a> [wikipedia.org]

I think it's something like Pray for a man and you save him once. Teach him to pray for himself and you save him for a lifetime.

StackExchange (0, Flamebait)

BisexualPuppy (914772) | more than 2 years ago | (#38711804)

Here, http://superuser.com/ [superuser.com] . Or you could pray and wait for God to answer your wifi questions, idiot.

Re:StackExchange (5, Insightful)

zoloto (586738) | more than 2 years ago | (#38711882)

Who knew such unabashed idiocy and bigotry would exist on slashdot? He's asking a tech question for a NPO and you retort with such drivel?

Re:StackExchange (-1, Flamebait)

Anonymous Coward | more than 2 years ago | (#38711992)

He's a godboy, he deserves no help.

I'm with BisexualPuppy, let him pray for help. What? Doesn't he have faith?

Re:StackExchange (2)

Anonymous Coward | more than 2 years ago | (#38712082)

I sure agree with you, it hurts to see how a good place to exchange information is slowly dying and becoming less and less worth our attention.

Re:StackExchange (1)

Robert Zenz (1680268) | more than 2 years ago | (#38711910)

Actually that's not a good question for any SE site. It's at best a buying recommendation and at worst a "plz give me da linkz!" question...so no, stop sending people with such awful questions to SE.

Open-mesh (4, Informative)

hedwards (940851) | more than 2 years ago | (#38711806)

Honestly, just use something like open-mesh, it has all the software available to do just that without too much hassle. Additionally they're more easily spaced throughout the building with less interference than you would normally get.

charge 'em (3, Insightful)

samjam (256347) | more than 2 years ago | (#38711808)

Use enterprise WPA2 with keys. Give each client device a key. Charge $5 to provide a key. Church members who are donating will probably reduce their donation by $5 that month in order to pay for the key.

You can revoke keys individually.

Disclaimer: I don't know what I'm talking about, you might need expensive hotspots to do that, but for large building with more than one hotspot, you probably want special hotspots with decent handover as folk move from one hotspot to another.

Re:charge 'em (5, Informative)

dissy (172727) | more than 2 years ago | (#38712220)

Another option is to use a Captive Portal built into a routing device.
If you can throw together a machine with two NIC or some wireless cards, the software side can be handled with ZeroShell [zeroshell.net] , or if you prefer a paid support contract, the previously open source Untangle [untangle.com]

Captive Portal requires registration with a username/password to use the wifi, and can perform metering for if you wish to charge or just limit time. You can also setup different sets of web filters or firewall rules that change on a set schedule.

The Web Filtering modules will likely make your committee chair happy, as you can easily block most categories like pornography, gambling, hacking, etc.
It isn't impossible to get around of course, but should be enough for due diligence.

Good luck!

Admin (2, Insightful)

Anonymous Coward | more than 2 years ago | (#38712256)

Use enterprise WPA2 with keys. Give each client device a key. Charge $5 to provide a key. Church members who are donating will probably reduce their donation by $5 that month in order to pay for the key.

You can revoke keys individually.

Disclaimer: I don't know what I'm talking about, you might need expensive hotspots to do that, but for large building with more than one hotspot, you probably want special hotspots with decent handover as folk move from one hotspot to another.

That sounds like a great quick-get-the-job-done solution but here's the 'but': adminstration.

Most churches have an admin - one business admin. I don't know how to put it kindley so here's a prediction of what will happen based upon what I've observed with other things that these adminstrators do:

You will be constantly dealing with folks who's key doesn't work. Keys that still work when they shouldn't and a constant searching for keys.

It will be one cluster fuck.

Volunteer IT person?

They turnover fast: they have work projects that take all their time up, can't deal with church committees, they find mega paying jobs on another coast, etc .....

Not sure I understand the point here (4, Interesting)

Shadow of Eternity (795165) | more than 2 years ago | (#38711812)

You're trying to set up one of those hotel style "Welcome to our network give us all your money to see the internet" pages to let only your sunday school students reach the internet? Or are you trying to block the guests off your network complete? Since this is tagged as wireless why not just use WPA2 and set up your students, classes, or whatever with access?

Not sure what the point of one of those hotel pages is here.

Re:Not sure I understand the point here (-1)

Anonymous Coward | more than 2 years ago | (#38711984)

It IS a filthy money-grabbing institution we're discussing here, so that's most likely the case anyway.

To OP, I'm sure you can pray to your imaginary friend and read that stupid bible you tote around to find the answer, no??

Re:Not sure I understand the point here (2, Insightful)

Anonymous Coward | more than 2 years ago | (#38712148)

You could still try to point him in the right direction, if someone asks for the way to the airport it isn't that important if you understand why he wants to leave town!

Re:Not sure I understand the point here (0)

Anonymous Coward | more than 2 years ago | (#38712354)

However, if his response is because he wants to get to the next town over, you might tell him the train is quicker.

Re:Not sure I understand the point here (0)

Anonymous Coward | more than 2 years ago | (#38712320)

Maybe OP hasn't a very extensive experience in providing wireless services to a set of clients. His only experience with that service may be that which is provided by hotels, and therefore he expresses this concept by comparing it to the only service he is familiar with.

Regarding the original topic, my 0,02€ are the following: don't waste any time resources on a non-problem. Just put out a wide-open wifi access point which you only turn on when it is really needed and then go on with your life. If some problem occurs regarding some weird wireless use then it should be easy to demonstrate that your organization wasn't responsible for any problem.

Out of the Box (0)

Anonymous Coward | more than 2 years ago | (#38711814)

pfsense.org

Small budget with time on your hands? (3, Informative)

Anonymous Coward | more than 2 years ago | (#38711820)

Try to flash a Linksys:

http://www.polarcloud.com/tomato
http://www.dd-wrt.com/site/index
http://coova.org/

Just turn it off (4, Insightful)

Captain Hook (923766) | more than 2 years ago | (#38711824)

If the access point is only meant to be used by the Sunday school, and they only meet at certain times. why not just switch the AP off when the Sunday School meeting isn't running?

Re:Just turn it off (1)

Anonymous Coward | more than 2 years ago | (#38712014)

You can then setup with a good secure protocol and a stong password and turn it off during the week. You don't need a login page... just give the people you want the username and password to login.

If you don't want to turn off then setup the access point to NOT broadcast the SSID (network name). Then you don't then have to power off the access point / router and people won't be able to see the network name. Only people that know the network name, username and password can login.

Also call your network something like "Judas"

Re:Just turn it off (5, Informative)

1u3hr (530656) | more than 2 years ago | (#38712238)

If you don't want to turn off then setup the access point to NOT broadcast the SSID (network name).

Don't.

http://www.zdnet.com/blog/ou/the-six-dumbest-ways-to-secure-a-wireless-lan/43 [zdnet.com] "SSID hiding: There is no such thing as "SSID hiding". You're only hiding SSID beaconing on the Access Point. There are 4 other mechanisms that also broadcast the SSID over the 2.4 or 5 GHz spectrum. The 4 mechanisms are; probe requests, probe responses, association requests, and re-association requests. Essentially, youre talking about hiding 1 of 5 SSID broadcast mechanisms. Nothing is hidden and all youve achieved is cause problems for Wi-Fi roaming when a client jumps from AP to AP. "

Re:Just turn it off (4, Funny)

Anonymous Coward | more than 2 years ago | (#38712358)

They're trying to discourage casual freeloaders, not secure their network against tech savvy dorks like you. Turning off SSID broadcast does that very effectively.

Re:Just turn it off (1)

icebraining (1313345) | more than 2 years ago | (#38712282)

If you don't want to turn off then setup the access point to NOT broadcast the SSID (network name). Then you don't then have to power off the access point / router and people won't be able to see the network name. Only people that know the network name, username and password can login.

What's the purpose of that? Either they're regular users and they already know the SSID (so they can connect to the hidden network) or they aren't and then the password is enough to deter them.

Simples (3, Informative)

Anonymous Coward | more than 2 years ago | (#38711826)

try Easy Hotspot - http://easyhotspot.inov.asia/ obviously depending on exactly what you want to do... (we run the authentication system as a VM but it'll work nicley on a cheap PC) also we're using DDWRT on our access points so only using the easyhotspot system as an authentication system.

Here's an idea (5, Informative)

Pikoro (844299) | more than 2 years ago | (#38711830)

Try a google search for "Captive WiFi Portal".

That's the term you want. Get yourself a DD-WRT compatible router and install one of these packages: http://www.dd-wrt.com/wiki/index.php/Captive_Portal [dd-wrt.com]

Re:Here's an idea (3, Informative)

Anonymous Coward | more than 2 years ago | (#38711932)

Absolutely. I will throw my (considerable, following Christmas excesses,) weight behind pfSense (pfsense.org) as a captive portal (CP) solution.

An old PC with a (couple of) extra $5 NIC(s) will provide a great, free, robust, easy to setup CP.

Re:Here's an idea (3, Informative)

hairyfeet (841228) | more than 2 years ago | (#38712408)

Its a shame you posted AC as i'd say your idea is the clear winner and would only add that if you are doing this for a church you should talk to your local mom & pop PC shop. Not only are we packrats and tend to have boxes full of NICs but if its a church or other non profit we'll often work with you to get you something thrown together as close to cost as possible. Since its a non profit I'd not want some big old power sucking P4 blasting through power, i'd use an underclocked Celeron or Sempron, maybe something in the sub 2Ghz range since he won't need that much power for that job, and build it into a nice cheap old Dell or Emachine mini tower and there you are, a dirt cheap CP box. hell if you are lucky they may even have an older SFF office box just sitting in the back they can let you have dirt cheap that would be perfect for the job and if you ask nicely i bet the guy would even be willing to help you set it up.

Re:Here's an idea (4, Informative)

Lumpy (12016) | more than 2 years ago | (#38712096)

Dont use DD-WRT, that project is dead. Last BETA release was 2 years ago. Use OpwnWRT that has many packages for this and is still actively maintained.

No matter what he IS going to have to spend at least 2 weeks learning this stuff, or buy a commercial setup maintained by a It professional.

Re:Here's an idea (2)

postbigbang (761081) | more than 2 years ago | (#38712336)

May I suggest using two APs; one has a strong key WPA 2 PSK and WPS disabled. It serves as the main access point for biz apps. The second one simply connects to the first one, uses a different non-interfering channel, and is the public version of the private one (WPS disabled, 802.11g only to catch the widest denominator of potential user). Route the second AP to the gateway.

And like a good IT admin, make sure that all of the machines on your biz network are fully secured, updated, and turned OFF when not in use.

Captive Portal (4, Informative)

Anonymous Coward | more than 2 years ago | (#38711834)

It's called a captive portal, and it's not the solution you're looking for. Depending on AP it'll be easier to setup time of day access or only give the WPA2 passpoem to churchgoers.

Re:Captive Portal (4, Informative)

Anonymous Coward | more than 2 years ago | (#38712006)

From past experience (probably obsolete) - ChilliSpot [wikipedia.org] was a very straightforward captive portal to setup (simplest setup is a beige box with two network cards, plus two configuration scripts).

ChiliSpot appears to be a defunct project, but CoovaChilli [coova.org] has risen from its ashes.

set a password and change it regularly (4, Insightful)

acidream (785987) | more than 2 years ago | (#38711838)

Seems like you could just set a password and post it somewhere in a room that is not accessible to guests. Change the password every week.

Re:set a password and change it regularly (5, Funny)

Hognoxious (631665) | more than 2 years ago | (#38712086)

Don't post the password, post a clue to it like "Judges 5:16 word 10". Anyone who doesn't know the answer doesn't deserve access!

Re:set a password and change it regularly (1)

gnomeza (649598) | more than 2 years ago | (#38712204)

Nice idea!

Though the implementation might need tweaking.
Judges 5:16, word 10 could be any of:
the, to, hear, bleatings, pipings, lowings
depending on your version.

Re:set a password and change it regularly (0)

Anonymous Coward | more than 2 years ago | (#38712324)

Well, its a code book. The trick is to use that churches bible (since they will already have a standardised bible for that reason).

Re:set a password and change it regularly (4, Funny)

sqldr (838964) | more than 2 years ago | (#38712328)

If it's from the old testament, there's a 90% chance that the word will always be "begat"

too short (1)

dutchwhizzman (817898) | more than 2 years ago | (#38712332)

And a very common word. Word 7 would be better, but still rather short.

Re:too short (0)

Anonymous Coward | more than 2 years ago | (#38712398)

The Lord will punish those who guess with unreliable connections and infected web sites, and He will reward those who know^wbelieve with flawless handovers.

Time-of-day restriction (5, Insightful)

bgarcia (33222) | more than 2 years ago | (#38711840)

Restrict the wireless router's use to Sunday mornings during class. Don't operate it during the week.

Re:Time-of-day restriction (1)

Anonymous Coward | more than 2 years ago | (#38711944)

If your wireless router doesn't support this feature, you can go low-tech and use a timer switch.

Re:Time-of-day restriction (3, Insightful)

Ginger Unicorn (952287) | more than 2 years ago | (#38712104)

or go even lower tech and just ask the sunday school teacher to turn it on and off

Re:Time-of-day restriction (0)

Anonymous Coward | more than 2 years ago | (#38712226)

Try Tomato Firmware. I use it for a Youth Hostel. It's simple to setup and it has access time page where you can set time of the week internet is on. It has lots of goodies like bandwidth graphs, mac filter, port forwarding, ect..
DD-WRT also has this stuff but I find Tomato is much easier to Administrat.

www.polarcloud.com/tomato

It would be a miracle (-1)

Anonymous Coward | more than 2 years ago | (#38711848)

Maybe you should pray to your non-existent deity for guidance since he's omniscient and everything.

Re:It would be a miracle (1, Funny)

Anonymous Coward | more than 2 years ago | (#38711942)

God can't help with wifi issues since his presence tends to cause excessive interference across the wireless spectrum.

Re:It would be a miracle (5, Insightful)

Anonymous Coward | more than 2 years ago | (#38712258)

This thread makes me embarrassed to be an atheist...

Re:It would be a miracle (4, Insightful)

Linzer (753270) | more than 2 years ago | (#38712360)

Yup, the amount of atheist bigotry and unpleasantness here is incredible. Now in their defense, these people are probably Americans who endure a lot of religious bigotry in their daily lives. They are just trying to fight back, but this doesn't really help at all.

Re:It would be a miracle (0, Troll)

Anonymous Coward | more than 2 years ago | (#38712382)

Replace 'church' with 'brainwashing center'. You realise why we have to be aggressive.

Re:It would be a miracle (4, Insightful)

TheRaven64 (641858) | more than 2 years ago | (#38712376)

Seriously? Just because some religious people behave like dicks to people of different beliefs to them doesn't mean that you have to join in. He asked a technical question, the fact that it's related to a church is irrelevant.

ThinkPenguin.gom DD-WRT Router (1)

Anonymous Coward | more than 2 years ago | (#38711856)

Try a google search for "Captive WiFi Portal".

That's the term you want. Get yourself a DD-WRT compatible router and install one of these packages: http://www.dd-wrt.com/wiki/index.php/Captive_Portal [dd-wrt.com]

Re:ThinkPenguin.gom DD-WRT Router (1)

Lumpy (12016) | more than 2 years ago | (#38712108)

http://coova.org/ [coova.org]

NOT the Dead DD-WRT project.

DD-WRT has not had a release even for their beta for over 2 years now.

Re:ThinkPenguin.gom DD-WRT Router (1)

galaad2 (847861) | more than 2 years ago | (#38712390)

NOT the Dead DD-WRT project.

DD-WRT has not had a release even for their beta for over 2 years now.

that is not true at all...

ftp://ftp.dd-wrt.com/others/eko/V24_TNG/ [dd-wrt.com]
ftp://ftp.dd-wrt.com/others/eko/V24-K26/ [dd-wrt.com]

ftp://ftp.dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/2011/ [dd-wrt.com]
ftp://ftp.dd-wrt.com/others/eko/BrainSlayer-V24-preSP2/2010/ [dd-wrt.com]

release quality though... that is another matter... e.g. release 18000 causes bricking in tp-link wr1043nd routers... :(
http://www.dd-wrt.com/phpBB2/viewtopic.php?t=148172 [dd-wrt.com]

Re:ThinkPenguin.gom DD-WRT Router (1)

Lumpy (12016) | more than 2 years ago | (#38712416)

And those are linked to the front page?

no you had to dig deep in the forums to get them.

Honestly V24 should have been released last year. BrainSlayer is more interested in his side project that is the "paid" releases that you haveto subscribe to.

Whereas OpenWRT has not chosen to take the leave it in beta with no real releases for 2 years model.

Fonera might be something? (1)

sruitenbeek (1642933) | more than 2 years ago | (#38711876)

Maybe you can adapt a FON hotspot and socialize WiFi-sharing. Fon uses an unencrypted public network, but you need to have a login to access it. Or you can pay for access. More information can be found on http://fon.com/ [fon.com]

Use a timer (1)

Anonymous Coward | more than 2 years ago | (#38711888)

To make it as simple as possible, without requiring learning too much on your part and with a simple concept for the comitte chair to grasp:

Start with a simple timer on the power supply for the AP, only allow it to power up on Sundays. If you need wireless for the church admin the rest of the week use a second AP with security and share that with the admin. This way the guests on Sundays don't need to know any secret keys and nobody without a secret gets to use the net the rest of the week.

If you feel comfortable with setting up advanced software and convincing the chair that you know your trade, you might want to use a CAPTIVE PORTAL, with or without pay sollution, or a double AP (guest and secret zone), or an AP with the timer implemented in software or one of the many other sollutions that no doubt will be suggested here, most of them without regard for the hardest task, convincing the chair that this is the right sollution.

Why are you asking a slashdot ? (-1, Flamebait)

Going_Digital (1485615) | more than 2 years ago | (#38711894)

Surely God will have the answer not a bunch of heathen nerds on slashdot ? Perhaps you need to pray harder for the answer.

Just use Meraki (2)

MunkieLife (898054) | more than 2 years ago | (#38711914)

Use something like the Meraki MR16 - It sounds like you aren't the most technically savvy in this regard, and even if you were this makes life easy. There are other ways to do this, but this is probably the easiest I've seen. www.meraki.com

fuck off churchie (-1)

Anonymous Coward | more than 2 years ago | (#38711920)

go pray to your imaginary friend in the sky. maybe he'll help you out.

ePoint HotSpot (1)

Anonymous Coward | more than 2 years ago | (#38711930)

ePoint Systems has a solution for you. Cheaper and better than Meraki, full Open Source, great service.
www.epointsystem.org

a simple policy for a simple situation... (5, Interesting)

demerson3 (1631599) | more than 2 years ago | (#38711938)

At my church we have a pretty simple policy: the network is protected with WPA2 encryption, it has an easy-to-remember password, and we give it to everyone who needs it. Make sure staff knows not to tell the password to your basketball guests, etc. We change the password about once a year, and let the new password spread organically. It works pretty well. People in the congregation ask each other for the password (or more likely, ask someone whom they know is on the tech-savvy side) and so those who need it are able to get back on. Another thing that you can do is give the network an essid name like "Sunday School Only" -- that will make your guests less likely to try to gain access, and also the Sunday School patrons will know that they should feel free to ask for the password.

Re:a simple policy for a simple situation... (1)

Anonymous Coward | more than 2 years ago | (#38711976)

+1.
Also, with a DD-WRT (or Openwrt) you can easily* enable internet access only on Sunday.

* In DD-WRT, it is under "Access Restrictions" => "Days"

Re:a simple policy for a simple situation... (1)

portablejim (1538997) | more than 2 years ago | (#38711986)

Just realised I posted AC.

Re:a simple policy for a simple situation... (2)

portablejim (1538997) | more than 2 years ago | (#38711990)

+1. Also, with a DD-WRT (or Openwrt) you can easily* enable internet access only on Sunday. * In DD-WRT, it is under "Access Restrictions" => "Days"

Get a second router for $15 (0)

Anonymous Coward | more than 2 years ago | (#38711946)

Get a second router that can be turned on and open during these events, and lock down the current infrastructure. Make the DHCP lease 60 minutes.

Home Brew Captive Portal With OpenBSD (4, Interesting)

petval (2474520) | more than 2 years ago | (#38711950)

Hi, latest BSD mag 1/12 has this article Home Brew Captive Portal With OpenBSD [bsdmag.org] :
Have you ever used a public wireless network that has a splash screen such that you have to agree to certain terms before going to the Internet? The author of this article will show you step by step how to build one of those using OpenBSD’s Packet Filter (pf).

PEAPv0/EAP-MSCHAPv2 (1)

bWareiWare.co.uk (660144) | more than 2 years ago | (#38711954)

Whilst the captive-portal system where you login via a HTML form seems to be popular (perceived ease of use?), you can also do per-user password authentication at the WiFi level.
All you need is a AP that supports EAP (or Enterprise) WPA (all good ones will), and to setup a RADIUS server (http://freeradius.org/ [freeradius.org] ) to handle the actual authentication.
Personally this is much cleaner (AP isn't listed as unsecured, you don't have to wait for the redirection to the portal which is inevitable slow and doesn't work at all if you are using email not a web browser).

dd-wrt (0)

Anonymous Coward | more than 2 years ago | (#38711958)

dd-wrt then setup hotspot etc etc.

Analysis (2)

Meneth (872868) | more than 2 years ago | (#38711962)

What I think the OP wants is to give people Internet access without simultaneously giving them access to the organization's LAN. He also doesn't want to invest in new hardware, seeing as how they've just done that.

So: how to set up the WLAN APs to block IP packets directed to anything except the gateway (or the Internet) itself?

My router can already do this. (3, Informative)

Computershack (1143409) | more than 2 years ago | (#38712036)

I can set up a guest wifi network on my router that has a separate WEP/WPA key and does not allow access to the other wired/wifi network unless I specifically say it can. Its a Netgear DGND3300v2 if thats any help...

Give up your beliefs (-1)

Anonymous Coward | more than 2 years ago | (#38711994)

Just give up your irrational Christian beliefs and all your problems will be solved at once.

Oh, and kids: Don't go to school on Sundays, alright?

No thanks. (-1)

Anonymous Coward | more than 2 years ago | (#38712008)

I'm not going to give you the answer to your problem, because you're just going to thank "god" and run with it while dismissing the fact that *I* gave you the solution; not "god".

Re:No thanks. (2, Insightful)

JohnnyComeLately (725958) | more than 2 years ago | (#38712042)

No, you're not going to answer because you're an absolute idiot. Log in and post that dumb azz crap. Not to mention you had to see the dozens of other a$$ hats who posted the same stupid thing, but no you had to anonymously post exactly the same crap because....??? Fail. Go back to playing your PS2, and mom should have dinner ready in a few minutes. Try not to complain about the free food in your free house.

Re:No thanks. (1)

dspolleke (1139333) | more than 2 years ago | (#38712370)

Next time better ask the question at www.iccm.org or just refrain from mentioning your faith.. apparantly it brings out the worst in some people

First things first (3, Funny)

outsider007 (115534) | more than 2 years ago | (#38712052)

You want to get your hands on a patron saint of wifi [wikipedia.org] figurine to put on top of your router.

Cheeky... (0)

Anonymous Coward | more than 2 years ago | (#38712092)

It's not my area of expertise, but doesn't the "turning the other cheek" policy apply here? Open your wi-fi. If you run out of bandwidth, buy more bandwidth. Also, isn't praying wireless data transmission? You might want to look into that, they've obviously got some military-grade encryption going there.

Quote at the bottom of the page:
"All Bibles are man-made." -- Thomas Edison

Christianity (0, Interesting)

Anonymous Coward | more than 2 years ago | (#38712176)

Wasn't this all about sharing?

The only wireless communication you need in Church (-1, Offtopic)

PolygamousRanchKid (1290638) | more than 2 years ago | (#38712206)

. . . is between Him and yourself; during silent prayer. He doesn't charge outrageous rates for crappy service, and He doesn't throttle traffic either. There is no need for gadgets that do the Devil's work in a Sunday school class: God, the Book and the Rod is all you need.

Seriously, is maybe one hour a week a little to long to go without our life's electric information and communication traveling symbiotic companions?

What's God's twitter channel anyway, maybe I should listen in? Isn't Facebook problematic for Allah, because he doesn't like seeing pictures of himself and Mohammed?

Re:The only wireless communication you need in Chu (1)

Dynetrekk (1607735) | more than 2 years ago | (#38712228)

@almightygod

Re:The only wireless communication you need in Chu (1)

Chuck Chunder (21021) | more than 2 years ago | (#38712252)

He doesn't charge outrageous rates for crappy service, and He doesn't throttle traffic either.

He's pretty sloppy with the ACKs though.

let me answer that for you (0)

Anonymous Coward | more than 2 years ago | (#38712234)

http://lmgtfy.com/?q=wifi+catch+and+release+for+jesus

Biblical pass code (3, Interesting)

petes_PoV (912422) | more than 2 years ago | (#38712240)

Just make the pass phrase a biblical quote. Change it each week and you kill 2 birds. How likely is it that the basketball players will have a bible handy AND your religious classes will have an incentive to read it to find the reference.

Some routers have it built in (0)

Anonymous Coward | more than 2 years ago | (#38712254)

My Router (Billion 7800N) can have different wifi profiles for different time periods. allowing to do what you need.

Another way would be to use a second router (an old ISP provided router donated by someone would be great) connect it by cable, and have it set on a timer plug that would be really easy to set up

Censoring (1)

aXi (6533) | more than 2 years ago | (#38712264)

From what I read, you want to restrict internet access to the sunday school classes. Are we talking censoring or actually only allowing sunday school pupils to connect? If you mean the latter, simply enable wpa or wpa2 security on sundays and only give the wpa/wpa2 password to students. If you mean the former I can and will not help you, for I think each is in his own right to have the freedom to inform oneself by anyway possible as to whether to believe or not to believe.

axi.
--
I am an atheist but I believe in the right of religion even if it makes no sense to me,.

Wireless access only (0)

Anonymous Coward | more than 2 years ago | (#38712288)

why not get the macs from the PC units and initiate wireless access only by mac address

Documentation? (0)

Evil_Ether (1200695) | more than 2 years ago | (#38712304)

The best documentation I could recomend for you is The God Delusion by Richard Dawkins XD

Re:Documentation? (0)

outsider007 (115534) | more than 2 years ago | (#38712316)

Really? How about Origin of Species by C. Darwin?

Re:Documentation? (0)

Evil_Ether (1200695) | more than 2 years ago | (#38712368)

I didn't say the only documentation I would recomend and not all xtions believe in creation myths. Not that it makes them any less ... ... I can't think of a nice way to finnish that sentance.

Re:Documentation? (0)

outsider007 (115534) | more than 2 years ago | (#38712388)

Mmm. You said the best. Darwin is clearly the authoritative god-denier. He gave us a reasonable explanation as to wtf we're doing here that does not involve deities and he did it first.

Re:Documentation? (0)

Evil_Ether (1200695) | more than 2 years ago | (#38712458)

That's like telling someone who believes the Sun goes round the Earth to read Copernicus, you need to start them off with a picture book wih big wrighting.

Why restrict it? (1)

fa2k (881632) | more than 2 years ago | (#38712312)

Obligatory non-answer: If it's an uncapped connection, how about just being a good neighbour and leave it on? If you get scary DMCA letters or the users on your wired network gets slowed down, *then* think about access control. Like others have suggested, please consider putting the AP on a timer switch if it's only used a few hours every week, to reduce interference for others.

Coova! (2)

gregthebunny (1502041) | more than 2 years ago | (#38712362)

http://coova.org/ [coova.org]

Ubuntu Server + CoovaChilli + DD-WRT = an easy and free captive portal system

WARNING: this is not a drop-in solution, some customization and piecing-together required. Throw FreeRADIUS or CoovaRADIUS into the mix for easier user-level authentication.

Simple solution (1)

Anonymous Coward | more than 2 years ago | (#38712374)

The original post stated that the chair was not comfortable allowing unrestricted access to the church's network. The problem does not appear to be one of bandwidth but rather security. The wireless network should be on a separate segment from the church's systems. Increasingly, many visitors use YouVersion or Logos during church activities. I would use an appropriate number of WPA/WEP enabled devices to cover the family life center. Use a simple password that is freely shared with members and guests. One other caveat, If the church does not already have an Internet filter in place consider using something like openDNS. This will help restrict access to porn and other inappropriate material.

I dont't work there. (0)

Anonymous Coward | more than 2 years ago | (#38712384)

Its called Nomadix. http://www.nomadix.com/products_overview.php

Captive portal/Hot spot/walled garden hardware (3, Informative)

ldm (676254) | more than 2 years ago | (#38712386)

I've used MikroTik hardware in the past to build wifi hotspots for customers. It's pretty easy to use, very friendly command line. You want something like this [routerboard.com] in an enclosure something like this [linitx.com] . They're reasonably robust, and once configured properly, will do what you want (and a whole lot more should you want to change the setup in future) for a good long time.

PacketFence (0)

Anonymous Coward | more than 2 years ago | (#38712414)

You might also want to look at PacketFence.

Using the inline mode (if your APs aren't too "enterprise class"), it'll offer you everything. The current development version also integrates with billing engines (like authorize.net) if you want to charge for network access.

It's a feature on most wireless access points now (1)

kilodelta (843627) | more than 2 years ago | (#38712426)

You can specify day/time options for wireless access. I know it's on Linksys routers. Probably Netgear too.

PfSense has it all (1)

jampola (1994582) | more than 2 years ago | (#38712428)

And it's free. Does Captive Portal with ease and runs on almost anything, so long as it has 2 Ethernet cards. Runs on top of BSD and uses the pf routing module. Uses a web interface to set up.

I have an office with 40 PC's being served by an P3 something with 512mb ram running PfSense with 3 network cards (balancing dual ADSL2 connections) and a gigbit out to the switch and it works a treat and never dies. It's a sinch to setup and I also have setup captive portal and again, it is DEAD EASY.

http://www.pfsense.org/index.php?option=com_content&task=view&id=71&Itemid=81 [pfsense.org] This should answer most of your questions.

Oh, and don't be detered by the BSD logo (Beastie!) since I am pretty sure the fella has nothing against Christianity as he is, you know, a cartoon! As for me, whatever floats your boat I say...
Load More Comments
Slashdot Login

Need an Account?

Forgot your password?

Submission Text Formatting Tips

We support a small subset of HTML, namely these tags:

  • b
  • i
  • p
  • br
  • a
  • ol
  • ul
  • li
  • dl
  • dt
  • dd
  • em
  • strong
  • tt
  • blockquote
  • div
  • quote
  • ecode

"ecode" can be used for code snippets, for example:

<ecode>    while(1) { do_something(); } </ecode>