Each Active Portal may serve one or many wireless access points. The Active Portal provides network identification, user acceptance of an AUP, reverse intrusion detection, traffic shaping, and logging functions. Optional parts are a caching DNS server, and web proxy caching. Use the method outlined in Squid for transparent port 80 interception. Snort or other IDS monitors all outbound Wireless Traffic for Abuse.
Abuse includes spam, hacking, and DoS attacks.
Sends notification to UFT to disallow IP address after abuse. All client web requests after abuse is detected are redirected to web page notifying why access has been turned off and who to contact. RIDS Rules Updater Daily checks of centralized webpage via SSL of new and updated RIDS rules. Verifies SSL certificate of RIDS Rule server to prevent tampering via DNS poisoning. Logging of NAT user activity To help in tracking down malicious user activity.