allow debit group to accees only payment website

[Rens Houben]

Seems to me that the simplest way of getting this accomplished would be to assign users from the 'debit' group IP addresses in a specific subnet that can't connect to the internet directly, but can browse via a http proxy which directs all access attempts to the payment site. Once they've paid they can reconnect and they'll get the regular network.

--
Rens Houben
Systemec Internet Services