1 PC, several users

[diozea]

Hello,
Each of my family have a Windows account on the same PC.
After the Windows session opening, when a member log in to keexy the first time, all of others users are authenticates with the first keexy account.

I think keexy only filter by source IP. It's a huge limitation that make useless users profile for my usage.

Others topics:
I would like to ping my LAN devices by hostname. Is there a way to do that?

Some tips:
you should add some use cases in the wiki:

• Parents who want to limit kids browsing by duration -> not possible (it's important to say it, I think It's a "must have" for parents)
  
• Explain how to allow kids to use only a limited couple of websites (school websites for instance) when his profile "Leisure time" is disabled by the scheduler.
  

Anothers tips:

• Add a feature to download a backup all keexy configs (in case of crash).
  
• Explain how users can find the Captive Portal with their browser. (It seems that there is no http redirect before the first login).
  
• When the user's profile is out of schedule, the message displaying in the browser is not user friendly (waiting time exceeded).
  
• Explain that you can't change the profile of any devices, if the device itself (wich you are lagin as admin) has a device profile which don't allow it to brows internet (out of schedule). The message displayed is confusing (Unable to connect ... Please check if the device is on the network.)
  

Currently Keexybox is more oriented to be a DNS blocker than a Parental control tool.
I think you are not so far to be one. I hope thoses features will be available soon (even as a paid Premium features, but paid oneshot, not by annual subscription).

Could we see somewhere your roadmap?

[diozea]

Hello,
Each of my family have a Windows account on the same PC.
After the Windows session opening, when a member log in to keexy the first time, all of others users are authenticates with the first keexy account.

I think keexy only filter by source IP. It's a huge limitation that make useless users profile for my usage.

Others topics:
I would like to ping my LAN devices by hostname. Is there a way to do that?

Some tips:
you should add some use cases in the wiki:

• Parents who want to limit kids browsing by duration -> not possible (it's important to say it, I think It's a "must have" for parents)
  
• Explain how to allow kids to use only a limited couple of websites (school websites for instance) when his profile "Leisure time" is disabled by the scheduler.
  

Anothers tips:

• Add a feature to download a backup all keexy configs (in case of crash).
  
• Explain how users can find the Captive Portal with their browser. (It seems that there is no http redirect before the first login).
  
• When the user's profile is out of schedule, the message displaying in the browser is not user friendly (waiting time exceeded).
  
• Explain that you can't change the profile of any devices, if the device itself (wich you are lagin as admin) has a device profile which don't allow it to brows internet (out of schedule). The message displayed is confusing (Unable to connect ... Please check if the device is on the network.)
  

Currently Keexybox is more oriented to be a DNS blocker than a Parental control tool.
I think you are not so far to be one. I hope thoses features will be available soon (even as a paid Premium features, but paid oneshot, not by annual subscription).

Could we see somewhere your roadmap?

[paul]

Hello,

Thank you for your message.

Keexybox interacts at the network level as a gateway and DNS, which therefore creates limitations.
Used as parental control, it will not be as effective as a software parental control installed directly on the device whose efficiency comes at the cost of privacy (software can access at your history, your data...).
So, yes keexybox filter by source IP only. The login entered in the captive portal only connects the device to the internet. User have to disconnect from Keexybox when he stops using the computer.

About backup, there is no tool that can backup all the keexybox config. But it allows you to export, users, devices, profiles and blacklist that you can import in case of crash.
Look at: https://wiki.keexybox.org/doku.php/installation_update

About the redirect to the Captive Portal, the browser should be automaticaly redirected to the captive portal if the device use keexybox DNS.
It should work at least for Windows, Apple, Android devices. For others, if you know the tested URL used by the device to detect the captive portal, you can add it by updating the value "cportal_test_domains" in https://[yourkeexyboxip]:8003/config/advanced.

About profile is out of schedule..., I understand you want the user to have a message like "You connection is out of time range" when he accesses to https://mywebsite.com for example,
Displaying message like this can create other complications, because mywebsite.com should point to keexybox IP instead of website IP and the consequences are as follows :
- DNS cache issue: device will kept keexybox IP for mywebsite.com in the cache. That mean when user is allow again to access the internet he can no longer access the website for the duration of the cache.
- HTTPS error issue: Most of websites are in HTTPS, if a user access to https://mywebsite.com he will get a message that tell him the certificate is not trusted (because it is the keexybox one that is not related to the domain mywebsite.com). This is not a more friendly message.

This is why keexybox simply block the traffic and user get a time out. If we find a solution to display a more friendly message, we will do so. But today we don't have a technical solution.

About explain that you can't change the profile of any devices, I think it is related to this Thread: https://forum.keexybox.org/Thread-unable...n-a-Iphone

To date there is no published roadmap. We do have to.

[paul]

Hello,

Thank you for your message.

Keexybox interacts at the network level as a gateway and DNS, which therefore creates limitations.
Used as parental control, it will not be as effective as a software parental control installed directly on the device whose efficiency comes at the cost of privacy (software can access at your history, your data...).
So, yes keexybox filter by source IP only. The login entered in the captive portal only connects the device to the internet. User have to disconnect from Keexybox when he stops using the computer.

About backup, there is no tool that can backup all the keexybox config. But it allows you to export, users, devices, profiles and blacklist that you can import in case of crash.
Look at: https://wiki.keexybox.org/doku.php/installation_update

About the redirect to the Captive Portal, the browser should be automaticaly redirected to the captive portal if the device use keexybox DNS.
It should work at least for Windows, Apple, Android devices. For others, if you know the tested URL used by the device to detect the captive portal, you can add it by updating the value "cportal_test_domains" in https://[yourkeexyboxip]:8003/config/advanced.

About profile is out of schedule..., I understand you want the user to have a message like "You connection is out of time range" when he accesses to https://mywebsite.com for example,
Displaying message like this can create other complications, because mywebsite.com should point to keexybox IP instead of website IP and the consequences are as follows :
- DNS cache issue: device will kept keexybox IP for mywebsite.com in the cache. That mean when user is allow again to access the internet he can no longer access the website for the duration of the cache.
- HTTPS error issue: Most of websites are in HTTPS, if a user access to https://mywebsite.com he will get a message that tell him the certificate is not trusted (because it is the keexybox one that is not related to the domain mywebsite.com). This is not a more friendly message.

This is why keexybox simply block the traffic and user get a time out. If we find a solution to display a more friendly message, we will do so. But today we don't have a technical solution.

About explain that you can't change the profile of any devices, I think it is related to this Thread: https://forum.keexybox.org/Thread-unable...n-a-Iphone

To date there is no published roadmap. We do have to.