• Provide a DHCP server (ISC dhcpd)

• Provide a DNS server (ISC bind9) Good idea to ratelimit dns packets to prevent people using IP-over-DNS tunneling, eg http://nstx.dereference.de/ (don't tell StarBucks or Krasnapolsky)

• Provide an IPsec server (Openswan) - X.509 certificate generation on the fly after CreditCard processing? - XAUTH/Radius based scratch cards?

Notes: