I have an AP setup on a pi3 (external wifi dongle/antennas) and it functions as hoped with no direct internet access, other than one major issue.
The issue I am having is my android devices and others want to drop off as they can't call home (to Google or similar).
My solution, despite being fruitless, is to look into a wifi hotspot signin similar to what you get at hotels and coffee shops.
Currently, I have hostAP setup (3 APs in one), and dnsmasq with iptables being put into place to forward the port 53 requests back to dnsmasq. I used the redirection of port 53 to catch those using other dns servers to avoid the control on the AP.
To put the whole thing into prospective, the project is as follows;
- Central open AP with 3-4 high gain directional attennas, using different channels for each (4 wifi dongles, one PI).
- Connection gains you access to the control network, which has a web interface with documentation, instructions and chat room (video conferencing is on the nice to have list).
- No direct internet access NATed out the eth0 except when available and controlled using iptables.
- In a nutshell, its a mobile INTRAnet to permit access to any connecting devices.
Any suggestions on working around the device dropping because it can't call home?