NatACL is a firewall group policy controller for intranets and the Internet. It is made of 3 main programs: a DHCP server, a Web authenticator, and a statistic collector. It forces users to use a DHCP client.
Group policies can be based on MAC address. ACLs may be created to control which group may see other groups. Users can be forced to authenticate over the Web. Internet access can be restricted by using DNAT/SNAT. Different networks (subnets) can be placed on the same logical network.