wired authentication (kernel module)

[Gunter Burchardt]

> I have tested that in combination with Hostap and it works. I don't think 
> my solution is exectly the one Gunter is searching for but I got iptables 
> routing unauthenticated clients to a login page. So iptables can do the 
> trick as you describe. With wired or wireless client, that doesn't matter.

And what about output? Iptables cant match output mac! Also its
impossible to accout (count bytes and packets) output without knowing
ip address. A port in PAE is normaly assigned to a mac and not to a ip.
hostapd dont care about ip addresses!

regards
gunter