Welcome, Guest
You have to register before you can post on our site.

Username
  

Password
  





Search Forums

(Advanced Search)

Forum Statistics
» Members: 8,786
» Latest member: sarimshaikh
» Forum threads: 66
» Forum posts: 181

Full Statistics

Latest Threads
[RESOLVED] Install script...
Forum: Installation
Last Post: sarimshaikh
4 hours ago
» Replies: 1
» Views: 3,201
Network Topology Question
Forum: Users and devices connection management
Last Post: sarimshaikh
11 hours ago
» Replies: 2
» Views: 21,729
purely device based
Forum: Users and devices connection management
Last Post: sarimshaikh
11 hours ago
» Replies: 2
» Views: 21,316
WIZARD
Forum: Installation
Last Post: emmsch
09-18-2023, 02:48 PM
» Replies: 0
» Views: 3,357
Proxmox
Forum: Installation
Last Post: benoit
08-30-2023, 04:54 AM
» Replies: 1
» Views: 2,447
Getting started
Forum: Users and devices connection management
Last Post: byronbulb
07-03-2023, 02:30 PM
» Replies: 0
» Views: 7,247
Dual network interfaces n...
Forum: Network
Last Post: whopz
06-20-2023, 11:07 PM
» Replies: 0
» Views: 4,401
Hardware
Forum: Users and devices connection management
Last Post: emmsch
06-19-2023, 08:12 AM
» Replies: 2
» Views: 6,332
iptables issue with times...
Forum: Profiles
Last Post: rdavila
02-05-2023, 02:20 PM
» Replies: 1
» Views: 4,554
Custom iptables rules
Forum: Network
Last Post: rdavila
02-05-2023, 02:08 PM
» Replies: 1
» Views: 3,160

  WIZARD
Posted by: emmsch - 09-18-2023, 02:48 PM - Forum: Installation - No Replies

Hi,
May i know how to activate the KeexyBox configuration Wizard page in the Keexyboc WEBUI?  I need the URL to run the Configuration wizard again. Will appreciate if someone can help. 

I have managed to install the KeexyBox software in Debian 11. I'm using Banana pi (BPI M2+) - Armbian 23.02.2 Bullseye Linux 5.15.93-sunxi. Everthing was working fine untill, for some reason, i cleared the Domain routing cache. Now, some of the services are not running. Unable to start them again either. (Screeshot attached).

I'm thinking if I can run the wizard again, I will be able to do the settings again.

Thanks,

Regards,

Emmanuel

Print this item

  Proxmox
Posted by: radu - 07-10-2023, 07:33 AM - Forum: Installation - Replies (1)

is it possible to install keexybox intro virtual machine in proxmox ? how should I proceed? Thank you

Print this item

  Getting started
Posted by: byronbulb - 07-03-2023, 02:30 PM - Forum: Users and devices connection management - No Replies

Hi - I'm reasonably tech-savvy but I am having trouble figuring out the initial setup for my use case. 

I think I want a hybrid network topology, but I'm not sure. 

My goal is to use keexybox to control internet access by my kids - they each have an iPad, and there is an AppleTV that they use which I would like to limit and manage. I would like to be able to schedule internet availability for these devices, and be able to pause/resume the internet when needed. Content filtering would be great too but it is less critical to me.

We have a ton of devices in the house, but I only really need to use keexybox to control the internet on the kids devices and appletv. The other devices in the home could continue to use the vanilla internet from my ISP unless there's a good reason to go through the keexybox.

I have a mesh router set up in a largish home, I would like to continue to use that wifi network as my network if at all possible.

Is there a guide for this kind of setup? I have been reading the docs but I am a little overwhelmed.

Thank you!!

Print this item

  Dual network interfaces not sticking in settings
Posted by: whopz - 06-20-2023, 11:07 PM - Forum: Network - No Replies

Hi there. I'm running a Raspberry Pi 4b with the flashed SD card image, default config so far, trying unsuccessfully to use 2 network interfaces.

I'm aiming to position the Pi as a "man-in-the-middle" interface to ensure the features of KeexyBox can't be bypassed. My kids are getting to the age where they'd be smart enough to statically set an IP address and set the gateway to the router rather than KeexyBox. I don't want to allow them to do that.

I have the on-board interface and an external USB interface. Both are being recognised by the OS:

Code:
br0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.0.2  netmask 255.255.255.0  broadcast 192.168.0.255
        inet6 fe80::dea6:32ff:fe37:221c  prefixlen 64  scopeid 0x20<link>
        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)
        RX packets 1775  bytes 234402 (228.9 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 445  bytes 56742 (55.4 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

br0:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.2  netmask 255.255.255.0  broadcast 192.168.1.255
        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)
        RX packets 1775  bytes 259252 (253.1 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 451  bytes 57066 (55.7 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4098<BROADCAST,MULTICAST>  mtu 1500
        ether a8:63:7d:61:64:5d  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0



Despite both br0 and eth0 being up, I don't see eth0 as a selectable option in the admin, http://192.168.0.2:8001/config/network. Only eth1. If I select eth1 and reboot, it goes back to br0.

How can I get both physical network interfaces operational on two separate physical networks via those adapters?

Print this item

  iptables issue with timestart-timestop due to timezone
Posted by: rdavila - 01-12-2023, 02:40 AM - Forum: Profiles - Replies (1)

Hello everyone,

I found an issue that seems to be caused by iptables, but I wanted to check if it's known and if there are any workarounds.

My timezone is EST, which at the moment is UTC -05:00
I create a Schedule to give access on Wednesday from 18:00 to 20:00 EST.
This translates to Wednesday 23:00 to Thursday 01:00 UTC.

When I apply the Profile to a Device, it gets blocked at 19:00 EST.

The problem seems to be that the timestart and timestop parameters to iptables are translated to UTC, and this breaks the access.

Below is the iptables line created by KeexyBox.
-A FORWARD -m mac --mac-source nn:nn:nn:nn:nn:nn -m time --timestart 23:00:00 --timestop 01:00:00 --weekdays Wed -j 49_FORWARD

When the time is 19:00 EST, I think the following is what iptables interprets:

  • Time is 00:00 UTC
  • The timestart parameter is 23:00:00
  • 00:00 is before the timestart parameter
  • iptables decides that the rule does not apply

I hope this all made sense :-)

Print this item

  Schedule does not seem to be working
Posted by: rdavila - 01-09-2023, 06:52 PM - Forum: Profiles - Replies (1)

Hello everyone,

I created a Profile with a schedule to only allow connections to the Internet during certain times of the day. I can see the Device is using the correct Profile, but I can still access the Internet on that Device outside of the Scheduled Time.

Below are the details of the Schedule configuration. (please see the attached file "Schedule Screenshot.jpg" for a screenshot of the schedule)
The goal is to allow access to the Internet only during the following times:

  • Monday through Thursday - 6:00pm to 7:00pm
  • Friday -  3:00pm to 10:00pm
  • Saturday - 12:00pm to 8:00pm
As a test, I browsed to a website today Monday at 1:25pm, which is outside of the Schedule, and I was able to access the Internet.
(please see the attached file "Access Log Screenshot.jpg" for a screenshot of the Access Log page)

If I click on the little "Eye Icon" in the Access Log page, it takes me to the Connection Information page for that Device, which confirms the correct Profile is being assigned.
(please see attached "Connection Information screenshot.jpg)

Any ideas of what I might be doing wrong?

Thanks in advance!



Attached Files Thumbnail(s)
           
Print this item

  Custom iptables rules
Posted by: rdavila - 01-09-2023, 03:49 PM - Forum: Network - Replies (1)

Hi everyone,

I hope this is the correct place to post this.

I want to add a few custom rules to iptables and I want them to be applied at boot time. Unfortunately there is no place in the KeexyBox Web Gui to enter custom iptable rules.

I checked /opt/keexybox and /etc for clues, but could not find any.

Where can I add custom iptables rules so they are saved and not overwritten by KeexyBox at boot time?

Thanks in advance!

Print this item

  [RESOLVED] Install script failing on Raspberry Pi model 2B
Posted by: m_keexybox_user - 01-03-2023, 02:22 PM - Forum: Installation - Replies (1)

I get the following error message:

Code:
Installing required Python modules...
Collecting mysql
Collecting MySQL-python
  Using cached https://files.pythonhosted.org/packages/a5/e9/51b544da85a36a68debe7a7091f068d802fc515a3a202652828c73453cad/MySQL-python-1.2.5.zip
Collecting mysql-connector
Collecting wget
Building wheels for collected packages: MySQL-python
  Running setup.py bdist_wheel for MySQL-python ... error
  Complete output from command /usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" bdist_wheel -d /tmp/tmptdBSvSpip-wheel- --python-tag cp27:
  running bdist_wheel
  running build
  running build_py
  creating build
  creating build/lib.linux-armv7l-2.7
  copying _mysql_exceptions.py -> build/lib.linux-armv7l-2.7
  creating build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/converters.py -> build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/connections.py -> build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/cursors.py -> build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/release.py -> build/lib.linux-armv7l-2.7/MySQLdb
  copying MySQLdb/times.py -> build/lib.linux-armv7l-2.7/MySQLdb
  creating build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/CR.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/FIELD_TYPE.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/ER.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/FLAG.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/REFRESH.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  copying MySQLdb/constants/CLIENT.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
  running build_ext
  building '_mysql' extension
  creating build/temp.linux-armv7l-2.7
  arm-linux-gnueabihf-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -Wdate-time -D_FORTIFY_SOURCE=2 -g -fdebug-prefix-map=/build/python2.7-HeKf1z/python2.7-2.7.13=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Dversion_info=(1,2,5,'final',1) -D__version__=1.2.5 -I/usr/include/mysql -I/usr/include/python2.7 -c _mysql.c -o build/temp.linux-armv7l-2.7/_mysql.o
  In file included from _mysql.c:46:0:
  /usr/include/mysql/mysql.h:285:14: error: duplicate member ‘reconnect’
   unsigned int reconnect;
                ^~~~~~~~~
  /usr/include/mysql/mysql.h:288:11: error: duplicate member ‘reconnect’
     my_bool reconnect;  /* set to 1 if automatic reconnect */
             ^~~~~~~~~
  error: command 'arm-linux-gnueabihf-gcc' failed with exit status 1

  ----------------------------------------
  Failed building wheel for MySQL-python
  Running setup.py clean for MySQL-python
Failed to build MySQL-python
Installing collected packages: MySQL-python, mysql, mysql-connector, wget
  Running setup.py install for MySQL-python ... error
    Complete output from command /usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-2N5i3k-record/install-record.txt --single-version-externally-managed --compile:
    running install
    running build
    running build_py
    creating build
    creating build/lib.linux-armv7l-2.7
    copying _mysql_exceptions.py -> build/lib.linux-armv7l-2.7
    creating build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/converters.py -> build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/connections.py -> build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/cursors.py -> build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/release.py -> build/lib.linux-armv7l-2.7/MySQLdb
    copying MySQLdb/times.py -> build/lib.linux-armv7l-2.7/MySQLdb
    creating build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/CR.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/FIELD_TYPE.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/ER.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/FLAG.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/REFRESH.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    copying MySQLdb/constants/CLIENT.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants
    running build_ext
    building '_mysql' extension
    creating build/temp.linux-armv7l-2.7
    arm-linux-gnueabihf-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -Wdate-time -D_FORTIFY_SOURCE=2 -g -fdebug-prefix-map=/build/python2.7-HeKf1z/python2.7-2.7.13=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Dversion_info=(1,2,5,'final',1) -D__version__=1.2.5 -I/usr/include/mysql -I/usr/include/python2.7 -c _mysql.c -o build/temp.linux-armv7l-2.7/_mysql.o
    In file included from _mysql.c:46:0:
    /usr/include/mysql/mysql.h:285:14: error: duplicate member ‘reconnect’
     unsigned int reconnect;
                  ^~~~~~~~~
    /usr/include/mysql/mysql.h:288:11: error: duplicate member ‘reconnect’
       my_bool reconnect;  /* set to 1 if automatic reconnect */
               ^~~~~~~~~
    error: command 'arm-linux-gnueabihf-gcc' failed with exit status 1

    ----------------------------------------
Command "/usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-2N5i3k-record/install-record.txt --single-version-externally-managed --compile" failed with error code 1 in /tmp/pip-build-Zjx58n/MySQL-python/
Errors on installing required packages

---- Checking installation of required packages for Keexybox ----

Checking installed packages
mariadb-server: OK
mariadb-client: OK
default-libmysqlclient-dev: OK
apache2: OK
libapache2-mod-php: OK
bridge-utils: OK
sudo: OK
ntp: OK
acl: OK
arp-scan: OK
php: OK
php-gettext: OK
php-gd: OK
php-intl: OK
php-json: OK
php-mysql: OK
php-readline: OK
php-curl: OK
python-pip: OK
python-dev: OK
python-mysqldb: OK
libproc-daemon-perl: OK
libfile-pid-perl: OK

Checking installed python modules
mysql: FAILED
MySQL-python: FAILED
mysql-connector: FAILED
wget: FAILED

-----------------------------------------------
Some required packages for Keexybox are missing
Installation aborted!
-----------------------------------------------


Upon inspection of the header file, it is a bit surprising to find reconnect being attempted to be defined in multiple places:

Code:
unsigned int reconnect;
unsigned int reconnect;
  enum mysql_status status;
  my_bool       free_me;                /* If free in mysql_close */
  my_bool       reconnect;              /* set to 1 if automatic reconnect */


Upon further re-runs and inspection, it appears that something is inserting the line below when it shouldn't and it's inserting it in a rather dumb way (doesn't check if this already exists and inserts it regardless)
Code:
unsigned int reconnect;


Upon checking further, the following code in "keexybox_21.04.2_raspios10/util/install_scripts/02_install_required_pkg.sh" seems to be adding the offending line:
Code:
# Fix issue when install MySQL connector for Python
sed '/st_mysql_options options;/a unsigned int reconnect;' /usr/include/mysql/mysql.h -i.bkp


Commenting out the 'sed' line as in below fixed the problem in the original post for me:

Code:
# Fix issue when install MySQL connector for Python
# sed '/st_mysql_options options;/a unsigned int reconnect;' /usr/include/mysql/mysql.h -i.bkp

Print this item

  Hardware
Posted by: emmsch - 12-27-2022, 05:22 AM - Forum: Users and devices connection management - Replies (2)

Hi Guys,

Thanks for the great software. This is regarding hardware for the software. Pi boards are hard to get nowadays. Is there an alternative hardware (similar to pi model) that can be used? Can it be installed in an android box? which is compact and so much easier to get.

Regards,

Emmanuel

Print this item

  Captive Portal Authentication success but no internet connected
Posted by: gvtgvt - 12-04-2022, 09:23 AM - Forum: Captive portal - No Replies

installed Keexybox in debian in local machine and using router with virtual server , captive portal forwarded to public static ip all works fine and from public ip everything is working but no mac details fetched after authentication successful and after auth success not able to use internet in browser even not ping using cmd prompt, need to install keexybox in private cloud like aws or azure , it is possible to done authentication of remote users using wireless lan controlelr like tplink omada controller and tplink based access point with External Portal Server (using keexybox).

Note: using Access point (Tplink Eap225) MAC is showing blank in Keexybox and DHCP is not enabled in Keexybox.

Print this item