Network topology

[SadE54]

Hi ,


I would you Keexy for parental control for my children( web filtering + time planning). They're using PS4 (over wifi) , one of my kids has it's own computer (over wifi) and there's the common computer for the family.
I have a 1Gb fiber access (with freebox revolution).
I guess I have to use it has wifi access point ? Because I would avoid to route all data , at least from the main computer , through Keexy, except if it's possible to get max bandwitdh with it (currently ~400Mb from main computer). Or using only dns is enough ? What do you think is the best topology for my case ?

And because this computer is shared , is it possible to use windows accounts to log in keexy ?

Regards,

Yann

[SadE54]

Hi ,


I would you Keexy for parental control for my children( web filtering + time planning). They're using PS4 (over wifi) , one of my kids has it's own computer (over wifi) and there's the common computer for the family.
I have a 1Gb fiber access (with freebox revolution).
I guess I have to use it has wifi access point ? Because I would avoid to route all data , at least from the main computer , through Keexy, except if it's possible to get max bandwitdh with it (currently ~400Mb from main computer). Or using only dns is enough ? What do you think is the best topology for my case ?

And because this computer is shared , is it possible to use windows accounts to log in keexy ?

Regards,

Yann

[paul]

Hi Yann,

If I understand correctly you need parental controls for all devices but you are worried about performance in terms of bandwidth. Keexybox does not allow you to define a bandwidth per device.

It is not the KeexyBox Wifi access point that will force the use of KeexyBox for site filtering, but the IP address, the default gateway and the DNS obtained by the DHCP of your network (that of keexybox or that of the freebox).

In your case you can use mixed use topology (https://wiki.keexybox.org/doku.php/netwo...f_keexybox).

PS4 and kid's computer use Keexybox as Gateway and DNS
Family computer use KeexyBox as DNS only and Freebox as gateway.

To to it :
- Disable DHCP on freebox
- Enable DHCP on keexybox
- Declare your family computer as device to keexybox : https://wiki.keexybox.org/doku.php/devices_manage
- In the field "DHCP reservation IP address (optional)" set an IP address in the same network as your freebox
- Reload Keexybox's DHCP service

[paul]

Hi Yann,

If I understand correctly you need parental controls for all devices but you are worried about performance in terms of bandwidth. Keexybox does not allow you to define a bandwidth per device.

It is not the KeexyBox Wifi access point that will force the use of KeexyBox for site filtering, but the IP address, the default gateway and the DNS obtained by the DHCP of your network (that of keexybox or that of the freebox).

In your case you can use mixed use topology (https://wiki.keexybox.org/doku.php/netwo...f_keexybox).

PS4 and kid's computer use Keexybox as Gateway and DNS
Family computer use KeexyBox as DNS only and Freebox as gateway.

To to it :
- Disable DHCP on freebox
- Enable DHCP on keexybox
- Declare your family computer as device to keexybox : https://wiki.keexybox.org/doku.php/devices_manage
- In the field "DHCP reservation IP address (optional)" set an IP address in the same network as your freebox
- Reload Keexybox's DHCP service

[SadE54]

Thanks for the answer , I will give it a try , just need to find a Rpi !
I have 2 other questions:
Firstly do you think that steam game platform could be 'blocked ' with keexybox in this topology ?  
And for the family computer , could keexibox use the windows accounts to manage the users ? So for example, my sons cannot play game between after 15h , but I can do

[SadE54]

Thanks for the answer , I will give it a try , just need to find a Rpi !
I have 2 other questions:
Firstly do you think that steam game platform could be 'blocked ' with keexybox in this topology ?  
And for the family computer , could keexibox use the windows accounts to manage the users ? So for example, my sons cannot play game between after 15h , but I can do

[paul]

Sorry, I forgot to reply your last question.

No, Keexybox can't deal with Windows account. You should create 2 user accounts in KeexyBox :
- One for your son, with internet access time
- Another one for you without time limits

When your son wants to use the family computer, he will have to enter his credentials in Keexybox's captive portal to connect to the internet. If you set access time untill 3PM, the traffic will be blocked after this time. Then, If you want to use this computer, you will have to logoff internet session of your son from KeexyBox's Captive portal page and use your credential to connect to the internet.

Important note : if you use Keexybox as DNS only as suggested in my last post, only DNS traffic will be blocked after 3PM. That means with Windows DNS cache system, your son will be able to play after this time until the DNS cache expires. And if the game on the computer communicate with servers directly with the IPs, he will also be able to play after the time. The most efficient solution to cut-off internet connection after 3PM is to use KeexyBox as DNS and gateway.

Yes steam game platform could be blocked if you know the domain to be blocked in the Blacklist (eg. steampowered.com).
You also be able to identify steam domains using the Keexybox's statistics dashboard and easly add them to the Blacklist with few clicks. (https://wiki.keexybox.org/doku.php/using_statistics).

Useful link about KeexyBox Blacklist : https://wiki.keexybox.org/doku.php/blacklist_manage

[paul]

Sorry, I forgot to reply your last question.

No, Keexybox can't deal with Windows account. You should create 2 user accounts in KeexyBox :
- One for your son, with internet access time
- Another one for you without time limits

When your son wants to use the family computer, he will have to enter his credentials in Keexybox's captive portal to connect to the internet. If you set access time untill 3PM, the traffic will be blocked after this time. Then, If you want to use this computer, you will have to logoff internet session of your son from KeexyBox's Captive portal page and use your credential to connect to the internet.

Important note : if you use Keexybox as DNS only as suggested in my last post, only DNS traffic will be blocked after 3PM. That means with Windows DNS cache system, your son will be able to play after this time until the DNS cache expires. And if the game on the computer communicate with servers directly with the IPs, he will also be able to play after the time. The most efficient solution to cut-off internet connection after 3PM is to use KeexyBox as DNS and gateway.

Yes steam game platform could be blocked if you know the domain to be blocked in the Blacklist (eg. steampowered.com).
You also be able to identify steam domains using the Keexybox's statistics dashboard and easly add them to the Blacklist with few clicks. (https://wiki.keexybox.org/doku.php/using_statistics).

Useful link about KeexyBox Blacklist : https://wiki.keexybox.org/doku.php/blacklist_manage