KeexyBox's forum

Welcome, Guest

You have to register before you can post on our site.

Search Forums

(Advanced Search)

Forum Statistics

» Members: 8,786
» Latest member: sarimshaikh
» Forum threads: 66
» Forum posts: 178

Full Statistics

Latest Threads

WIZARD
Forum: Installation
Last Post: emmsch
09-18-2023, 02:48 PM
» Replies: 0
» Views: 3,254

Proxmox
Forum: Installation
Last Post: benoit
08-30-2023, 04:54 AM
» Replies: 1
» Views: 2,369

Getting started
Forum: Users and devices connection management
Last Post: byronbulb
07-03-2023, 02:30 PM
» Replies: 0
» Views: 6,919

Dual network interfaces n...
Forum: Network
Last Post: whopz
06-20-2023, 11:07 PM
» Replies: 0
» Views: 4,327

Hardware
Forum: Users and devices connection management
Last Post: emmsch
06-19-2023, 08:12 AM
» Replies: 2
» Views: 6,193

iptables issue with times...
Forum: Profiles
Last Post: rdavila
02-05-2023, 02:20 PM
» Replies: 1
» Views: 4,463

Custom iptables rules
Forum: Network
Last Post: rdavila
02-05-2023, 02:08 PM
» Replies: 1
» Views: 3,101

Schedule does not seem to...
Forum: Profiles
Last Post: rdavila
01-11-2023, 07:52 PM
» Replies: 1
» Views: 1,932

[RESOLVED] Install script...
Forum: Installation
Last Post: m_keexybox_user
01-03-2023, 02:22 PM
» Replies: 0
» Views: 3,139

Captive Portal Authentica...
Forum: Captive portal
Last Post: gvtgvt
12-04-2022, 09:23 AM
» Replies: 0
» Views: 4,950

Google Playstore not responding

Posted by: shak4031 - 10-08-2021, 05:32 PM - Forum: Users and devices connection management - Replies (1)

	I have noticed that Google Playstore takes significantely longer to download apps then before Keexybox setup. Any ideas why this would be the case?

Google Mini unable to setup

Posted by: shak4031 - 08-30-2021, 06:22 PM - Forum: Users and devices connection management - Replies (1)

I am not able to get my Google Mini's setup. I believe the Google Home app during setup needs internet access and that cannot be done until the Google Mini is enabled in Keexybox. I discovered the device and enabled it but Google setup still fails. I am not sure how to proceed.

In my setup Keexybox is DHPC/DNS/Gateway for all the devices. I have no AP via the Rasberry PI 4, the WiFi's are being provided by either AP or Primary Router. depending on location of device.

-Ali

input output settings and dhcp

Posted by: luke - 08-22-2021, 02:39 PM - Forum: Network - Replies (2)

	Hi i have everything setting up on a pi 4, but having troubles setting up the input and the output network ips, how should i do the dhcp ips

Blacklist Subdomain No longer working

Posted by: playboyzay - 08-10-2021, 01:52 PM - Forum: Blacklist - Replies (1)

	The blacklists for subdomains aren't working correctly. If I add site.com to a blacklist, it is supposed to block asdf.site.com as well.

A profile with scheduled time doesn't work on Android 10

Posted by: diozea - 07-15-2021, 04:57 PM - Forum: Profiles - Replies (1)

	Hello, My android 10 smartphone doesn't block internet browsing between scheduled times (during lunch times). It can browse internet. While sheduled times slots, it works fine: The blacklisted domains are blocked as expected. The same profile works as expected with a Windows PC (on each slot times).

[solved] unable to connect a profile on a Iphone

Posted by: diozea - 07-11-2021, 01:54 PM - Forum: Profiles - Replies (2)

Hello,
My iphone got a lease once (don't know how), but after a disconnection (to change the device profile), I lost him.
I can't anymore connect a profile on this device. He can't browse internet (except with a user profile). From the iphone, on the portal, I'm "Off line".
Wifi connection on this iphone is setup to 'connexion auto' and 'Authentication auto'.

Code:
pi@raspberrypi:/opt/keexybox/dhcpd/etc $ more dhcpd.leases

lease 192.168.0.6 {

  starts 0 2021/07/11 13:21:52;

  ends 0 2021/07/11 15:21:52;

  cltt 0 2021/07/11 13:21:52;

  binding state active;

  next binding state free;

  rewind binding state free;

  hardware ethernet fdgwxfgwd;

  uid "\001**\021g)\363";

  client-hostname "iPhone";

1 PC, several users

Posted by: diozea - 07-11-2021, 03:47 AM - Forum: Users - Replies (1)

Hello,
Each of my family have a Windows account on the same PC.
After the Windows session opening, when a member log in to keexy the first time, all of others users are authenticates with the first keexy account.

I think keexy only filter by source IP. It's a huge limitation that make useless users profile for my usage.

Others topics:
I would like to ping my LAN devices by hostname. Is there a way to do that?

Some tips:
you should add some use cases in the wiki:

Parents who want to limit kids browsing by duration -> not possible (it's important to say it, I think It's a "must have" for parents)
Explain how to allow kids to use only a limited couple of websites (school websites for instance) when his profile "Leisure time" is disabled by the scheduler.

Anothers tips:

Add a feature to download a backup all keexy configs (in case of crash).
Explain how users can find the Captive Portal with their browser. (It seems that there is no http redirect before the first login).
When the user's profile is out of schedule, the message displaying in the browser is not user friendly (waiting time exceeded).
Explain that you can't change the profile of any devices, if the device itself (wich you are lagin as admin) has a device profile which don't allow it to brows internet (out of schedule). The message displayed is confusing (Unable to connect ... Please check if the device is on the network.)

Currently Keexybox is more oriented to be a DNS blocker than a Parental control tool.
I think you are not so far to be one. I hope thoses features will be available soon (even as a paid Premium features, but paid oneshot, not by annual subscription).

Could we see somewhere your roadmap?

[solved] dhcpd can't start on all interfaces

Posted by: diozea - 07-08-2021, 06:32 PM - Forum: DHCP - Replies (1)

Hello,
Systemctl gives me:
● dhcpcd.service loaded failed failed dhcpcd on all interfaces

So I'm not sure what's the really impact of the failed state of dhcpd service. What's your recommendation?
Tips: You should display more informations in "Services and power" (such as the detail status of each service, with the error). And add the service "logrotate"?

Code:
sudo ./init_dhcpd start

isc-dhcpd-4.4.2

ls: cannot access '/opt/keexybox/dhcpd/dhcpcd*.pid': No such file or directory

Internet Systems Consortium DHCP Server 4.4.2

Copyright 2004-2020 Internet Systems Consortium.

All rights reserved.

For info, please visit https://www.isc.org/software/dhcp/

Config file: /opt/keexybox/dhcpd/etc/dhcpd.conf

Database file: /opt/keexybox/dhcpd/etc/dhcpd.leases

PID file: /opt/keexybox/dhcpd/dhcpcd.pid

Wrote 0 class decls to leases file.

Wrote 0 deleted host decls to leases file.

Wrote 0 new dynamic host decls to leases file.

Wrote 13 leases to leases file.

Multiple interfaces match the same shared network: br0 br0:0

Listening on LPF/br0/dc:a6:32:d3:52:ea/local_net

Sending on   LPF/br0/dc:a6:32:d3:52:ea/local_net

Sending on   Socket/fallback/fallback-net

dhcpd.conf

Code:
pi@raspberrypi:/opt/keexybox/dhcpd/etc $ cat dhcpd.conf

# GENERATED BY KEEXYBOX WEBUI

# DO NOT EDIT THIS FILE

ddns-update-style none;

option domain-name "keexybox";

default-lease-time 600;

max-lease-time 7200;

log-facility local7;

class "external_host" {

            match hardware;

}

class "internal_host" {

            match hardware;

}

include "/opt/keexybox/dhcpd/etc/dhcpd-reservations.conf";

shared-network local_net {

        # INTERNET ROUTER SIDE

    subnet 192.168.1.0 netmask 255.255.255.0 {

        option routers 192.168.1.254;

                option domain-name-servers 192.168.1.1;

                pool {

                range 192.168.1.151 192.168.1.201;

                        allow members of "external_host";

                        deny unknown-clients;

                }

    }

        # USER AND DEVICES SIDE

    subnet 192.168.0.0 netmask 255.255.255.0 {

        option routers 192.168.0.254;

                option domain-name-servers 192.168.0.254;

                pool {

                range 192.168.0.1 192.168.0.100;

                        allow members of "internal_host";

                        allow unknown-clients;

                }

    }

}

Do we need to indicate which scope is autoritative?

Code:
more dhcpd-reservations.conf

# GENERATED BY KEEXYBOX WEBUI

# DO NOT EDIT THIS FILE

host ajonc {

        hardware ethernet MACaddress;

        fixed-address 192.168.0.37;

}

subclass "internal_host" MACaddress;

host Printer-Pixma {

        hardware ethernet MACaddress;

        fixed-address 192.168.0.3;

}

subclass "internal_host" MACaddress;

host Freebox-Mini {

        hardware ethernet MACaddress;

        fixed-address 192.168.0.4;

}

subclass "internal_host" MACaddress;

/opt/keexybox/dhcpd/etc/interfaces.conf

Code:
export LISTENING_INTERFACES="br0"

and

Code:
more /etc/network/interfaces

# GENERATED BY KEEXYBOX WEBUI

# DO NOT EDIT THIS FILE

# This file describes the network interfaces available on your system

# and how to activate them. For more information, see interfaces(5).

# Auto load interfaces

auto lo br0 br0:0

iface lo inet loopback

# Hotplug interfaces

allow-hotplug br0 br0:0

# Output network configuration

iface br0 inet static

    address 192.168.1.1

    netmask 255.255.255.0

    gateway 192.168.1.254

    dns-nameservers 208.67.222.222 8.8.4.4

    bridge_ports eth0

    bridge_stp off

    bridge_waitport 0

    bridge_waitport 0

# Internal network configuration

iface br0:0 inet static

    address 192.168.0.254

    netmask 255.255.255.0

On each PC, DHCP server is set to 192.168.1.1 (instead of 192.168.0.254 i think)

By the way, there is an issue with the time zone in the GUI. My timezone is Europe/Paris but when I checked in raspi-config it was "London".

Code:
Rq:

I'm using raspberry 4 with a for website filtering and anonymity. First for parental control, and a little for ad blocker.

internal interface of Keexybox: 192.168.0.254

external interface of Keexybox:192.168.1.1

router interface: 192.168.1.254

GW: 192.168.1.254

DNS1: 208.67.222.222

DNS2: 8.8.4.4

DNS Redirector: enabled

DHCP conf is (on the same interface so: Bro): 

internal: range 192.168.0.1 to 100

external: range 192.168.1.251 to  201

[Solved] Wifi configuration

Posted by: diozea - 07-04-2021, 10:37 AM - Forum: Wireless Access Point - Replies (1)

Hello,

I finished to setup keexybox for website filtering and anonymity topology with a raspberry pi 4.
Wifi form is filled.
But any wifi signal is broadcast by the raspberry.(As I understand, Pi 4 can act as an AccessPoint natively, Am I wrong?)
Keexybox GUI can't start hostapd service. The service is stopped.

On SSH, Raspberry warn me:
Wi-Fi is currently blocked by rfkill.
Use raspi-config to set the country before use.

raspi-config shows an error when I try to setup WLAN country:
Could not communicate with wpa_supplicant

pi@raspberrypi:~ $ cat /etc/wpa_supplicant/wpa_supplicant.conf
ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev
update_config=1

pi@raspberrypi:/opt/keexybox/hostapd/etc $ cat hostapd.conf
# GENERATED BY KEEXYBOX WEBUI
# DO NOT EDIT THIS FILE

# General
ssid=WifiNobel-keexy
interface=wlan0
bridge=br0
country_code=FR
hw_mode=g
channel=10
wmm_enabled=1
macaddr_acl=0

# Security
ignore_broadcast_ssid=0
auth_algs=1
wpa=2
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP
wpa_passphrase=mypassword

Do I miss something?

Browsing duration with limit per day

Posted by: diozea - 07-04-2021, 10:07 AM - Forum: Profiles - Replies (1)

	Hello, I would like to allow my kids to browse internet: - on a time slot -> okay i can setup that in a profile + - with a limit of duration per day -> how? If not, is it plan soonly? I think a lot of parents will use this feature. Thanks fo your work.

Pages (7): « Previous 1 2 3 4 5 … 7 Next »

Login
Username:
Password:	Lost Password?
	Remember me