KeexyBox's forum - Network

Dual network interfaces not sticking in settings

Tue, 20 Jun 2023 23:07:33 +0000

Hi there. I'm running a Raspberry Pi 4b with the flashed SD card image, default config so far, trying unsuccessfully to use 2 network interfaces.

I'm aiming to position the Pi as a "man-in-the-middle" interface to ensure the features of KeexyBox can't be bypassed. My kids are getting to the age where they'd be smart enough to statically set an IP address and set the gateway to the router rather than KeexyBox. I don't want to allow them to do that.

I have the on-board interface and an external USB interface. Both are being recognised by the OS:

Code:
br0: flags=4163  mtu 1500

        inet 192.168.0.2  netmask 255.255.255.0  broadcast 192.168.0.255

        inet6 fe80::dea6:32ff:fe37:221c  prefixlen 64  scopeid 0x20

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

        RX packets 1775  bytes 234402 (228.9 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 445  bytes 56742 (55.4 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

br0:0: flags=4163  mtu 1500

        inet 192.168.1.2  netmask 255.255.255.0  broadcast 192.168.1.255

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

eth0: flags=4163  mtu 1500

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

        RX packets 1775  bytes 259252 (253.1 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 451  bytes 57066 (55.7 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4098  mtu 1500

        ether a8:63:7d:61:64:5d  txqueuelen 1000  (Ethernet)

        RX packets 0  bytes 0 (0.0 B)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 0  bytes 0 (0.0 B)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Despite both br0 and eth0 being up, I don't see eth0 as a selectable option in the admin, http://192.168.0.2:8001/config/network. Only eth1. If I select eth1 and reboot, it goes back to br0.

How can I get both physical network interfaces operational on two separate physical networks via those adapters?

Custom iptables rules

Mon, 09 Jan 2023 15:49:29 +0000

Hi everyone,

I hope this is the correct place to post this.

I want to add a few custom rules to iptables and I want them to be applied at boot time. Unfortunately there is no place in the KeexyBox Web Gui to enter custom iptable rules.

I checked /opt/keexybox and /etc for clues, but could not find any.

Where can I add custom iptables rules so they are saved and not overwritten by KeexyBox at boot time?

Thanks in advance!

input output settings and dhcp

Sun, 22 Aug 2021 14:39:41 +0000

Hi i have everything setting up on a pi 4, but having troubles setting up the input and the output network ips, how should i do the dhcp ips

DHCP & DNS trouble

Thu, 17 Jun 2021 16:49:14 +0000

Hello,
I finish the setup on a raspberry 4 with a for website filtering and anonymity.
internal interface of Keexybox: 192.168.0.254
external interface of Keexybox:192.168.1.1
router interface: 192.168.1.254

GW: 192.168.1.254
DNS1: 208.67.222.222
DNS2: 8.8.4.4

DNS Redirector: enabled or disabled, same result. (what's criteria to decide to enable ou disable it?)

DHCP conf is (on the same interface so: Bro):
internal: range 192.168.0.1 to 100
external: range 192.168.1.251 to 201
Why both ranges have to me enabled?
How a device will now which range to use?

But from a PC, I can't resolve any domain. (From keexy I can).
(I haven't create a user or a device).

Any idea?

Samba and Plex no longer connect

Mon, 03 May 2021 22:30:35 +0000

After installation, I can no longer access plex and samaba on the local network, I looked at iptables and it seems that there is a drop for everything other than the keexybox ports, how can I release these services on the local network?

Thanks!

DNS Settings

Fri, 26 Feb 2021 17:14:15 +0000

Thank you for the great project.

According to the documentation, when unchecking "the box Use defined DNS as redirectors" on the Miscellaneous settings, the settings used in DNS 1 & 2 are ignored and DNS queries are not relayed. Further KB documentation says "DNS queries will be directly redirected to the root DNS servers on the Internet."

For clarification, is this essentially the same as "Unbound DNS"?

Also, in the DNS and Gateway settings page, under DNS 1 I have an entry 127.0.0.1 which I believe does in fact indicate Unbound DNS is active.

However, I am confused whether or not this entry is active or ignored due to the unchecked box mentioned above in Miscellaneous settings. Can I please have some clarification on these settings? Thank you

Example network setup/topologies

Tue, 12 Jan 2021 01:07:15 +0000

Hi everyone,

A bit of a setup guides for newbies like me.

It took me a while to setup Keexybox mainly because I made it hard for myself. I wanted to replicate:

with my router changed to:

- IP address: 192.168.1.200/24;

- I moved the DNS across to OpenDNS DNS entries:

- 208.67.222.222 and 208.67.220.220

until I setup a cron job to update the Blacklists.

I wanted the internal network to be: 10.0.0.0/24
and the output network to be: 192.168.1.0/24.

I thought it might be worthwhile showing what setups worked where you have two separate networks.

So Keexybox is:

- eth0: 192.168.1.254;

- etho:0: 10.0.0.1/24 for the input network, looks like (attachment: keexybox network screen 1.png)

and then your DHCP looks like attachments: keexybox dhcp screen 1.png and keexybox dhcp screen 2.png

I performed an update of the Raspberry Pi as well via bash shell:

Code:
$ ssh pi@192.168.1.254

password: 

# change your  password with:

$ passwd

# update the raspberry pi

$ sudo apt-get update

$ sudo apt-get upgrade

which introduced a new DHCP client dhcpcd.service which breaks the existing one.  Disable it:

$ sudo systemctl disable dhcpcd.service

and check that none of the interfaces are set to DHCP, they should be static:

Code:
$ cd /etc/network

$ less interfaces

This is generated by KeexyBox so make sure your entries are correct according to the screen shots, mine looks like:

Code:
# GENERATED BY KEEXYBOX WEBUI

# DO NOT EDIT THIS FILE

# This file describes the network interfaces available on your system

# and how to activate them. For more information, see interfaces(5).

# Auto load interfaces

auto lo eth0 eth0:0

iface lo inet loopback

# Hotplug interfaces

allow-hotplug eth0 eth0:0

# Output network configuration

iface eth0 inet static

    address 192.168.1.254

    netmask 255.255.255.0

    gateway 192.168.1.200

    dns-nameservers 192.168.1.200 208.67.222.222

# Internal network configuration

iface eth0:0 inet static

    address 10.0.0.1

    netmask 255.255.255.0

Then disable DHCP on the router (192.168.1.200) and let Keexybox restart:

Code:
$ sudo systemctl reboot

  keexybox network screen 1.png (Size: 91.97 KB / Downloads: 30)

  keexybox dhcp screen 2.png (Size: 87.45 KB / Downloads: 24)

  keexybox dhcp screen 1.png (Size: 86.89 KB / Downloads: 23)