I'll go with Swimmer here and say it's time to take your firewall solution a little more seriously and look at turning your routers in just strait AP's. Let PfSense handle the rest (or whichever you pick ;)) I'm a huge pf fan, and use it personally and professionally. I'm going to suggest not just captive portal, but blocking any and all traffic other than port 80, 25, and 110. That should give them web browsing, pop3 email, and outgoing SMTP for e-mail sending. That won't stop someone from using a p2p but it will limit the effectiveness of it. Then it's time to look at how many AP's you have vs rooms/possible connections etc.
This is a decent sized project, and will require some planning to get it to work effectively and happily for all your hotel guests. We can perhaps help a bit, but we'd need more information:
# of rooms (possible connections)
Bandwidth you have (and can you upgrade if you need to?)
services you want to allow (E-mail, web browsing, group printing, etc)
there are lots of very bright people on here that know a lot more than just internet tweaking, and we're all here to help the best we can
