Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 1,593
» Latest member: wovofujarusa
» Forum threads: 42
» Forum posts: 127

Full Statistics

Online Users
There are currently 17 online users.
» 0 Member(s) | 17 Guest(s)

Latest Threads
A profile with scheduled ...
Forum: Profiles
Last Post: paul
Yesterday, 11:04 AM
» Replies: 1
» Views: 95
unable to connect a profi...
Forum: Profiles
Last Post: paul
Yesterday, 11:00 AM
» Replies: 1
» Views: 52
dhcpd can't start on all ...
Forum: DHCP
Last Post: paul
Yesterday, 09:01 AM
» Replies: 1
» Views: 101
1 PC, several users
Forum: Users
Last Post: paul
Yesterday, 08:39 AM
» Replies: 1
» Views: 58
[Solved] Wifi configurati...
Forum: Wireless Access Point
Last Post: diozea
07-10-2021, 07:18 PM
» Replies: 1
» Views: 100
Browsing duration with li...
Forum: Profiles
Last Post: diozea
07-04-2021, 10:07 AM
» Replies: 0
» Views: 48
DHCP & DNS trouble
Forum: Network
Last Post: benoit
06-28-2021, 12:30 PM
» Replies: 3
» Views: 151
Select all categories
Forum: Profiles
Last Post: benoit
06-19-2021, 05:53 AM
» Replies: 1
» Views: 89
Connection schedules not ...
Forum: Users and devices connection management
Last Post: paul
05-28-2021, 12:00 PM
» Replies: 5
» Views: 652
Example network setup/top...
Forum: Network
Last Post: benoit
05-26-2021, 11:38 AM
» Replies: 2
» Views: 425

  A profile with scheduled time doesn't work on Android 10
Posted by: diozea - 07-15-2021, 04:57 PM - Forum: Profiles - Replies (1)

Hello,

My android 10 smartphone doesn't block internet browsing between scheduled times (during lunch times).
It can browse internet.

While sheduled times slots, it works fine: The blacklisted domains are blocked as expected.

The same profile works as expected with a Windows PC (on each slot times).

Print this item

  unable to connect a profile on a Iphone
Posted by: diozea - 07-11-2021, 01:54 PM - Forum: Profiles - Replies (1)

Hello,
My iphone got a lease once (don't know how), but after a disconnection (to change the device profile), I lost him.
I can't anymore connect a profile on this device. He can't browse internet (except with a user profile). From the iphone, on the portal, I'm "Off line".
Wifi connection on this iphone is setup to 'connexion auto' and 'Authentication auto'.

Code:
[email protected]:/opt/keexybox/dhcpd/etc $ more dhcpd.leases

lease 192.168.0.6 {
  starts 0 2021/07/11 13:21:52;
  ends 0 2021/07/11 15:21:52;
  cltt 0 2021/07/11 13:21:52;
  binding state active;
  next binding state free;
  rewind binding state free;
  hardware ethernet fdgwxfgwd;
  uid "\001**\021g)\363";
  client-hostname "iPhone";

Print this item

  1 PC, several users
Posted by: diozea - 07-11-2021, 03:47 AM - Forum: Users - Replies (1)

Hello,
Each of my family have a Windows account on the same PC.
After the Windows session opening, when a member log in to keexy the first time, all of others users are authenticates with the first keexy account.

I think keexy only filter by source IP. It's a huge limitation that make useless users profile for my usage.

Others topics:
I would like to ping my LAN devices by hostname. Is there a way to do that?

Some tips:
you should add some use cases in the wiki:

  • Parents who want to limit kids browsing by duration -> not possible (it's important to say it, I think It's a "must have" for parents)
  • Explain how to allow kids to use only a limited couple of websites (school websites for instance) when his profile "Leisure time" is disabled by the scheduler.
Anothers tips:
  • Add a feature to download a backup all keexy configs (in case of crash).
  • Explain how users can find the Captive Portal with their browser. (It seems that there is no http redirect before the first login).
  • When the user's profile is out of schedule, the message displaying in the browser is not user friendly (waiting time exceeded).
  • Explain that you can't change the profile of any devices, if the device itself (wich you are lagin as admin) has a device profile which don't allow it to brows internet (out of schedule). The message displayed is confusing (Unable to connect ... Please check if the device is on the network.)
Currently Keexybox is more oriented to be a DNS blocker than a Parental control tool.
I think you are not so far to be one. I hope thoses features will be available soon (even as a paid Premium features, but paid oneshot, not by annual subscription).

Could we see somewhere your roadmap?

Print this item

  dhcpd can't start on all interfaces
Posted by: diozea - 07-08-2021, 06:32 PM - Forum: DHCP - Replies (1)

Hello,
Systemctl gives me:
● dhcpcd.service loaded failed failed    dhcpcd on all interfaces

So I'm not sure what's the really impact of the failed state of dhcpd service. What's your recommendation?
Tips: You should display more informations in "Services and power" (such as the detail status of each service, with the error). And add the service "logrotate"?



Code:
sudo ./init_dhcpd start
isc-dhcpd-4.4.2
ls: cannot access '/opt/keexybox/dhcpd/dhcpcd*.pid': No such file or directory
Internet Systems Consortium DHCP Server 4.4.2
Copyright 2004-2020 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Config file: /opt/keexybox/dhcpd/etc/dhcpd.conf
Database file: /opt/keexybox/dhcpd/etc/dhcpd.leases
PID file: /opt/keexybox/dhcpd/dhcpcd.pid
Wrote 0 class decls to leases file.
Wrote 0 deleted host decls to leases file.
Wrote 0 new dynamic host decls to leases file.
Wrote 13 leases to leases file.
Multiple interfaces match the same shared network: br0 br0:0
Listening on LPF/br0/dc:a6:32:d3:52:ea/local_net
Sending on   LPF/br0/dc:a6:32:d3:52:ea/local_net
Sending on   Socket/fallback/fallback-net





dhcpd.conf
Code:
[email protected]:/opt/keexybox/dhcpd/etc $ cat dhcpd.conf
# GENERATED BY KEEXYBOX WEBUI
# DO NOT EDIT THIS FILE


ddns-update-style none;

option domain-name "keexybox";

default-lease-time 600;
max-lease-time 7200;

log-facility local7;

class "external_host" {
            match hardware;
}

class "internal_host" {
            match hardware;
}

include "/opt/keexybox/dhcpd/etc/dhcpd-reservations.conf";

shared-network local_net {
        # INTERNET ROUTER SIDE
    subnet 192.168.1.0 netmask 255.255.255.0 {
        option routers 192.168.1.254;
                option domain-name-servers 192.168.1.1;
                pool {
                range 192.168.1.151 192.168.1.201;
                        allow members of "external_host";
                        deny unknown-clients;
                }
    }

        # USER AND DEVICES SIDE
    subnet 192.168.0.0 netmask 255.255.255.0 {
        option routers 192.168.0.254;
                option domain-name-servers 192.168.0.254;
                pool {
                range 192.168.0.1 192.168.0.100;
                        allow members of "internal_host";
                        allow unknown-clients;
                }
    }
}

Do we need to indicate which scope is autoritative?


Code:
more dhcpd-reservations.conf
# GENERATED BY KEEXYBOX WEBUI
# DO NOT EDIT THIS FILE


host ajonc {
        hardware ethernet MACaddress;
        fixed-address 192.168.0.37;
}
subclass "internal_host" MACaddress;

host Printer-Pixma {
        hardware ethernet MACaddress;
        fixed-address 192.168.0.3;
}
subclass "internal_host" MACaddress;

host Freebox-Mini {
        hardware ethernet MACaddress;
        fixed-address 192.168.0.4;
}
subclass "internal_host" MACaddress;


/opt/keexybox/dhcpd/etc/interfaces.conf
Code:
export LISTENING_INTERFACES="br0"


and
Code:
more /etc/network/interfaces
# GENERATED BY KEEXYBOX WEBUI
# DO NOT EDIT THIS FILE

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# Auto load interfaces
auto lo br0 br0:0
iface lo inet loopback

# Hotplug interfaces
allow-hotplug br0 br0:0


# Output network configuration
iface br0 inet static
    address 192.168.1.1
    netmask 255.255.255.0
    gateway 192.168.1.254
    dns-nameservers 208.67.222.222 8.8.4.4

    bridge_ports eth0
    bridge_stp off
    bridge_waitport 0
    bridge_waitport 0

# Internal network configuration
iface br0:0 inet static
    address 192.168.0.254
    netmask 255.255.255.0


On each PC, DHCP server is set to 192.168.1.1 (instead of 192.168.0.254 i think)


By the way, there is an issue with the time zone in the GUI. My timezone is Europe/Paris  but when I checked in raspi-config it was "London".



Code:
Rq:
I'm using raspberry 4 with a for website filtering and anonymity. First for parental control, and a little for ad blocker.
internal interface of Keexybox: 192.168.0.254
external interface of Keexybox:192.168.1.1
router interface: 192.168.1.254

GW: 192.168.1.254
DNS1: 208.67.222.222
DNS2: 8.8.4.4

DNS Redirector: enabled

DHCP conf is (on the same interface so: Bro):
internal: range 192.168.0.1 to 100
external: range 192.168.1.251 to  201

Print this item

  [Solved] Wifi configuration
Posted by: diozea - 07-04-2021, 10:37 AM - Forum: Wireless Access Point - Replies (1)

Hello,

I finished to setup keexybox for website filtering and anonymity topology with a raspberry pi 4.
Wifi form is filled. 
But any wifi signal is broadcast by the raspberry.(As I understand, Pi 4 can act as an AccessPoint natively, Am I wrong?)
Keexybox GUI can't start hostapd service. The service is stopped.

On SSH, Raspberry warn me:
Wi-Fi is currently blocked by rfkill.
Use raspi-config to set the country before use.


raspi-config shows an error when I try to setup WLAN country:
Could not communicate with wpa_supplicant

[email protected]:~ $ cat /etc/wpa_supplicant/wpa_supplicant.conf
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1


[email protected]:/opt/keexybox/hostapd/etc $ cat hostapd.conf
# GENERATED BY KEEXYBOX WEBUI
# DO NOT EDIT THIS FILE

# General
ssid=WifiNobel-keexy
interface=wlan0
bridge=br0
country_code=FR
hw_mode=g
channel=10
wmm_enabled=1
macaddr_acl=0

# Security
ignore_broadcast_ssid=0
auth_algs=1
wpa=2
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP
wpa_passphrase=mypassword


Do I miss something?

Print this item

  Browsing duration with limit per day
Posted by: diozea - 07-04-2021, 10:07 AM - Forum: Profiles - No Replies

Hello,
I would like to allow my kids to browse internet:
- on a time slot -> okay i can setup that in a profile
+
- with a limit of duration per day -> how? If not, is it plan soonly?

I think a lot of parents will use this feature.

Thanks fo your work.

Print this item

  DHCP & DNS trouble
Posted by: diozea - 06-17-2021, 04:49 PM - Forum: Network - Replies (3)

Hello,
I finish the setup on a raspberry 4 with a for website filtering and anonymity.
internal interface of Keexybox: 192.168.0.254
external interface of Keexybox:192.168.1.1
router interface: 192.168.1.254

GW: 192.168.1.254
DNS1: 208.67.222.222
DNS2: 8.8.4.4

DNS Redirector: enabled or disabled, same result. (what's criteria to decide to enable ou disable it?)

DHCP conf is (on the same interface so: Bro): 
internal: range 192.168.0.1 to 100
external: range 192.168.1.251 to  201
Why both ranges have to me enabled?
How a device will now which range to use?

But from a PC, I can't resolve any domain. (From keexy I can).
(I haven't create a user or a device).

Any idea?

Print this item

  Select all categories
Posted by: diozea - 06-17-2021, 12:33 PM - Forum: Profiles - Replies (1)

Hello,
Thank you very much for your impressive work.

I would like to setup a school profile:
- available all the time
- but restricted only to school site or educational content (so only a couple of categories).

Is there a way to select all categories at the same times?
or to allow only one or 2 category and block the others?

Print this item

  purely device based
Posted by: lanceg10 - 05-26-2021, 03:25 AM - Forum: Users and devices connection management - Replies (1)

Looking for a way to purely handle traffic by devices without having users have to 'log in' with some profile to keexybox - so, for devices like a smart tv, want to be able to view traffic and selectively block domains.
is this possibe becuse, if so, i'm totally missing it.

Print this item

  I give up
Posted by: vit - 05-05-2021, 02:32 AM - Forum: Installation - Replies (1)

I spent a few days in it and got tired, I couldn't make it work well on the Rapsberry OS i386, I tried it with another PC with ubuntu 20, but also without success ... can you put a version to work on a virtual machine? to just download and start in vmware or virtual box? I really liked the software, too bad it's a nightmare trying to make it work manually.

Print this item