07-27-2021, 08:39 AM
Hello,
Thank you for your message.
Keexybox interacts at the network level as a gateway and DNS, which therefore creates limitations.
Used as parental control, it will not be as effective as a software parental control installed directly on the device whose efficiency comes at the cost of privacy (software can access at your history, your data...).
So, yes keexybox filter by source IP only. The login entered in the captive portal only connects the device to the internet. User have to disconnect from Keexybox when he stops using the computer.
About backup, there is no tool that can backup all the keexybox config. But it allows you to export, users, devices, profiles and blacklist that you can import in case of crash.
Look at: https://wiki.keexybox.org/doku.php/installation_update
About the redirect to the Captive Portal, the browser should be automaticaly redirected to the captive portal if the device use keexybox DNS.
It should work at least for Windows, Apple, Android devices. For others, if you know the tested URL used by the device to detect the captive portal, you can add it by updating the value "cportal_test_domains" in https://[yourkeexyboxip]:8003/config/advanced.
About profile is out of schedule..., I understand you want the user to have a message like "You connection is out of time range" when he accesses to https://mywebsite.com for example,
Displaying message like this can create other complications, because mywebsite.com should point to keexybox IP instead of website IP and the consequences are as follows :
- DNS cache issue: device will kept keexybox IP for mywebsite.com in the cache. That mean when user is allow again to access the internet he can no longer access the website for the duration of the cache.
- HTTPS error issue: Most of websites are in HTTPS, if a user access to https://mywebsite.com he will get a message that tell him the certificate is not trusted (because it is the keexybox one that is not related to the domain mywebsite.com). This is not a more friendly message.
This is why keexybox simply block the traffic and user get a time out. If we find a solution to display a more friendly message, we will do so. But today we don't have a technical solution.
About explain that you can't change the profile of any devices, I think it is related to this Thread: https://forum.keexybox.org/Thread-unable...n-a-Iphone
To date there is no published roadmap. We do have to.
Thank you for your message.
Keexybox interacts at the network level as a gateway and DNS, which therefore creates limitations.
Used as parental control, it will not be as effective as a software parental control installed directly on the device whose efficiency comes at the cost of privacy (software can access at your history, your data...).
So, yes keexybox filter by source IP only. The login entered in the captive portal only connects the device to the internet. User have to disconnect from Keexybox when he stops using the computer.
About backup, there is no tool that can backup all the keexybox config. But it allows you to export, users, devices, profiles and blacklist that you can import in case of crash.
Look at: https://wiki.keexybox.org/doku.php/installation_update
About the redirect to the Captive Portal, the browser should be automaticaly redirected to the captive portal if the device use keexybox DNS.
It should work at least for Windows, Apple, Android devices. For others, if you know the tested URL used by the device to detect the captive portal, you can add it by updating the value "cportal_test_domains" in https://[yourkeexyboxip]:8003/config/advanced.
About profile is out of schedule..., I understand you want the user to have a message like "You connection is out of time range" when he accesses to https://mywebsite.com for example,
Displaying message like this can create other complications, because mywebsite.com should point to keexybox IP instead of website IP and the consequences are as follows :
- DNS cache issue: device will kept keexybox IP for mywebsite.com in the cache. That mean when user is allow again to access the internet he can no longer access the website for the duration of the cache.
- HTTPS error issue: Most of websites are in HTTPS, if a user access to https://mywebsite.com he will get a message that tell him the certificate is not trusted (because it is the keexybox one that is not related to the domain mywebsite.com). This is not a more friendly message.
This is why keexybox simply block the traffic and user get a time out. If we find a solution to display a more friendly message, we will do so. But today we don't have a technical solution.
About explain that you can't change the profile of any devices, I think it is related to this Thread: https://forum.keexybox.org/Thread-unable...n-a-Iphone
To date there is no published roadmap. We do have to.