Wi-fi hotspot implementations

Good afternoon from Wisconsin,

I am needing to set up a wi-fi hotspot at my local coffee shop. I have
considered ZoneCD and LessNetworks, but those require reliance on an
outside service which may or may not be there when we need it.

As a result, I have been building my own implementation from scratch on
FreeBSD, using php and mysql for the authentication, squid for the
transparent proxy, dansguardian for content checking, but I haven't
figured out what to use to allow previously unauthenticated users who
have authenticated full access through the proxy. I've been thinking
about iptables filtering on mac address, but that seems like overkill,
especially with having to restart iptables every time a user
authenticates.

Does anyone here have any suggestions?

--
Isaac Grover, Owner
Quality Computer Services of River Falls, Wisconsin
Affordable I. T. Consulting, Web Design, and Web Hosting.
Commercial and Residential Inquiries Welcomed.
Web: http://www.qcs-rf.com

.