<![CDATA[KeexyBox's forum - Profiles]]> https://forum.keexybox.org/ Tue, 02 Jun 2026 19:09:05 +0000 MyBB <![CDATA[iptables issue with timestart-timestop due to timezone]]> https://forum.keexybox.org/Thread-iptables-issue-with-timestart-timestop-due-to-timezone Thu, 12 Jan 2023 02:40:10 +0000 rdavila]]> https://forum.keexybox.org/Thread-iptables-issue-with-timestart-timestop-due-to-timezone
I found an issue that seems to be caused by iptables, but I wanted to check if it's known and if there are any workarounds.

My timezone is EST, which at the moment is UTC -05:00
I create a Schedule to give access on Wednesday from 18:00 to 20:00 EST.
This translates to Wednesday 23:00 to Thursday 01:00 UTC.

When I apply the Profile to a Device, it gets blocked at 19:00 EST.

The problem seems to be that the timestart and timestop parameters to iptables are translated to UTC, and this breaks the access.

Below is the iptables line created by KeexyBox.
-A FORWARD -m mac --mac-source nn:nn:nn:nn:nn:nn -m time --timestart 23:00:00 --timestop 01:00:00 --weekdays Wed -j 49_FORWARD

When the time is 19:00 EST, I think the following is what iptables interprets:
  • Time is 00:00 UTC
  • The timestart parameter is 23:00:00
  • 00:00 is before the timestart parameter
  • iptables decides that the rule does not apply

I hope this all made sense :-)]]>
I found an issue that seems to be caused by iptables, but I wanted to check if it's known and if there are any workarounds.

My timezone is EST, which at the moment is UTC -05:00
I create a Schedule to give access on Wednesday from 18:00 to 20:00 EST.
This translates to Wednesday 23:00 to Thursday 01:00 UTC.

When I apply the Profile to a Device, it gets blocked at 19:00 EST.

The problem seems to be that the timestart and timestop parameters to iptables are translated to UTC, and this breaks the access.

Below is the iptables line created by KeexyBox.
-A FORWARD -m mac --mac-source nn:nn:nn:nn:nn:nn -m time --timestart 23:00:00 --timestop 01:00:00 --weekdays Wed -j 49_FORWARD

When the time is 19:00 EST, I think the following is what iptables interprets:
  • Time is 00:00 UTC
  • The timestart parameter is 23:00:00
  • 00:00 is before the timestart parameter
  • iptables decides that the rule does not apply

I hope this all made sense :-)]]> <![CDATA[Schedule does not seem to be working]]> https://forum.keexybox.org/Thread-Schedule-does-not-seem-to-be-working Mon, 09 Jan 2023 18:52:56 +0000 rdavila]]> https://forum.keexybox.org/Thread-Schedule-does-not-seem-to-be-working
I created a Profile with a schedule to only allow connections to the Internet during certain times of the day. I can see the Device is using the correct Profile, but I can still access the Internet on that Device outside of the Scheduled Time.

Below are the details of the Schedule configuration. (please see the attached file "Schedule Screenshot.jpg" for a screenshot of the schedule)
The goal is to allow access to the Internet only during the following times:
  • Monday through Thursday - 6:00pm to 7:00pm
  • Friday -  3:00pm to 10:00pm
  • Saturday - 12:00pm to 8:00pm
As a test, I browsed to a website today Monday at 1:25pm, which is outside of the Schedule, and I was able to access the Internet.
(please see the attached file "Access Log Screenshot.jpg" for a screenshot of the Access Log page)

If I click on the little "Eye Icon" in the Access Log page, it takes me to the Connection Information page for that Device, which confirms the correct Profile is being assigned.
(please see attached "Connection Information screenshot.jpg)

Any ideas of what I might be doing wrong?

Thanks in advance!

.jpg   Access Log Screenshot.jpg (Size: 150.15 KB / Downloads: 3)

.jpg   Connection Information Screenshot.jpg (Size: 139.2 KB / Downloads: 3)

.jpg   Schedule Screenshot.jpg (Size: 74.72 KB / Downloads: 3) ]]>
I created a Profile with a schedule to only allow connections to the Internet during certain times of the day. I can see the Device is using the correct Profile, but I can still access the Internet on that Device outside of the Scheduled Time.

Below are the details of the Schedule configuration. (please see the attached file "Schedule Screenshot.jpg" for a screenshot of the schedule)
The goal is to allow access to the Internet only during the following times:
  • Monday through Thursday - 6:00pm to 7:00pm
  • Friday -  3:00pm to 10:00pm
  • Saturday - 12:00pm to 8:00pm
As a test, I browsed to a website today Monday at 1:25pm, which is outside of the Schedule, and I was able to access the Internet.
(please see the attached file "Access Log Screenshot.jpg" for a screenshot of the Access Log page)

If I click on the little "Eye Icon" in the Access Log page, it takes me to the Connection Information page for that Device, which confirms the correct Profile is being assigned.
(please see attached "Connection Information screenshot.jpg)

Any ideas of what I might be doing wrong?

Thanks in advance!

.jpg   Access Log Screenshot.jpg (Size: 150.15 KB / Downloads: 3)

.jpg   Connection Information Screenshot.jpg (Size: 139.2 KB / Downloads: 3)

.jpg   Schedule Screenshot.jpg (Size: 74.72 KB / Downloads: 3) ]]> <![CDATA[A profile with scheduled time doesn't work on Android 10]]> https://forum.keexybox.org/Thread-A-profile-with-scheduled-time-doesn-t-work-on-Android-10 Thu, 15 Jul 2021 16:57:50 +0000 diozea]]> https://forum.keexybox.org/Thread-A-profile-with-scheduled-time-doesn-t-work-on-Android-10
My android 10 smartphone doesn't block internet browsing between scheduled times (during lunch times).
It can browse internet.

While sheduled times slots, it works fine: The blacklisted domains are blocked as expected.

The same profile works as expected with a Windows PC (on each slot times).]]>
My android 10 smartphone doesn't block internet browsing between scheduled times (during lunch times).
It can browse internet.

While sheduled times slots, it works fine: The blacklisted domains are blocked as expected.

The same profile works as expected with a Windows PC (on each slot times).]]> <![CDATA[[solved] unable to connect a profile on a Iphone]]> https://forum.keexybox.org/Thread-solved-unable-to-connect-a-profile-on-a-Iphone Sun, 11 Jul 2021 13:54:53 +0000 diozea]]> https://forum.keexybox.org/Thread-solved-unable-to-connect-a-profile-on-a-Iphone My iphone got a lease once (don't know how), but after a disconnection (to change the device profile), I lost him.
I can't anymore connect a profile on this device. He can't browse internet (except with a user profile). From the iphone, on the portal, I'm "Off line".
Wifi connection on this iphone is setup to 'connexion auto' and 'Authentication auto'.

Code:
pi@raspberrypi:/opt/keexybox/dhcpd/etc $ more dhcpd.leases

lease 192.168.0.6 {
  starts 0 2021/07/11 13:21:52;
  ends 0 2021/07/11 15:21:52;
  cltt 0 2021/07/11 13:21:52;
  binding state active;
  next binding state free;
  rewind binding state free;
  hardware ethernet fdgwxfgwd;
  uid "\001**\021g)\363";
  client-hostname "iPhone";
]]> My iphone got a lease once (don't know how), but after a disconnection (to change the device profile), I lost him.
I can't anymore connect a profile on this device. He can't browse internet (except with a user profile). From the iphone, on the portal, I'm "Off line".
Wifi connection on this iphone is setup to 'connexion auto' and 'Authentication auto'.

Code:
pi@raspberrypi:/opt/keexybox/dhcpd/etc $ more dhcpd.leases

lease 192.168.0.6 {
  starts 0 2021/07/11 13:21:52;
  ends 0 2021/07/11 15:21:52;
  cltt 0 2021/07/11 13:21:52;
  binding state active;
  next binding state free;
  rewind binding state free;
  hardware ethernet fdgwxfgwd;
  uid "\001**\021g)\363";
  client-hostname "iPhone";
]]> <![CDATA[Browsing duration with limit per day]]> https://forum.keexybox.org/Thread-Browsing-duration-with-limit-per-day Sun, 04 Jul 2021 10:07:43 +0000 diozea]]> https://forum.keexybox.org/Thread-Browsing-duration-with-limit-per-day I would like to allow my kids to browse internet:
- on a time slot -> okay i can setup that in a profile
+
- with a limit of duration per day -> how? If not, is it plan soonly?

I think a lot of parents will use this feature.

Thanks fo your work.]]> I would like to allow my kids to browse internet:
- on a time slot -> okay i can setup that in a profile
+
- with a limit of duration per day -> how? If not, is it plan soonly?

I think a lot of parents will use this feature.

Thanks fo your work.]]> <![CDATA[Select all categories]]> https://forum.keexybox.org/Thread-Select-all-categories Thu, 17 Jun 2021 12:33:50 +0000 diozea]]> https://forum.keexybox.org/Thread-Select-all-categories Thank you very much for your impressive work.

I would like to setup a school profile:
- available all the time
- but restricted only to school site or educational content (so only a couple of categories).

Is there a way to select all categories at the same times?
or to allow only one or 2 category and block the others?]]> Thank you very much for your impressive work.

I would like to setup a school profile:
- available all the time
- but restricted only to school site or educational content (so only a couple of categories).

Is there a way to select all categories at the same times?
or to allow only one or 2 category and block the others?]]> <![CDATA[limit a category with a time slot]]> https://forum.keexybox.org/Thread-limit-a-category-with-a-time-slot Thu, 22 Apr 2021 07:34:59 +0000 incableu]]> https://forum.keexybox.org/Thread-limit-a-category-with-a-time-slot
is it possible to block sites (social networks for example) during a time slot?
just block a category and do not cut the internet during this time ?]]>
is it possible to block sites (social networks for example) during a time slot?
just block a category and do not cut the internet during this time ?]]> <![CDATA[Tor]]> https://forum.keexybox.org/Thread-Tor Fri, 26 Feb 2021 17:27:35 +0000 Komi]]> https://forum.keexybox.org/Thread-Tor
I have ensured the Tor service is active and started and that the exit node country has been set. However, whenever I activate a profile using the Tor network via "Connection type" I loose connectivity.


I have also tried to send DNS queries over Tor using a "Direct connection" but that also fails with a DNS resolution error which leads me to believe the Tor network is not active or has stalled.

Thank you for any assistance.]]>
I have ensured the Tor service is active and started and that the exit node country has been set. However, whenever I activate a profile using the Tor network via "Connection type" I loose connectivity.


I have also tried to send DNS queries over Tor using a "Direct connection" but that also fails with a DNS resolution error which leads me to believe the Tor network is not active or has stalled.

Thank you for any assistance.]]> <![CDATA[One user with multiple profiles. Possible?]]> https://forum.keexybox.org/Thread-One-user-with-multiple-profiles-Possible Mon, 08 Feb 2021 12:26:30 +0000 kmrdeva]]> https://forum.keexybox.org/Thread-One-user-with-multiple-profiles-Possible
Let me elaborate on my use case / requirements.

I have created a user for my son, and 2 profiles.

class-time profile is from the morning to evening with a blacklist to block him from youtube etc.

free-time profile is from the evening to night with no blacklist i.e. nothing blocked.

How can I apply both profiles to the same user? It seems that we're only allowed one profile per user.


.png   keexy-profile-classtime.png (Size: 82.66 KB / Downloads: 3)


.png   keexy-profile-freetime.png (Size: 83.94 KB / Downloads: 3)


.png   keexy-user.png (Size: 38.98 KB / Downloads: 4) ]]>
Let me elaborate on my use case / requirements.

I have created a user for my son, and 2 profiles.

class-time profile is from the morning to evening with a blacklist to block him from youtube etc.

free-time profile is from the evening to night with no blacklist i.e. nothing blocked.

How can I apply both profiles to the same user? It seems that we're only allowed one profile per user.


.png   keexy-profile-classtime.png (Size: 82.66 KB / Downloads: 3)


.png   keexy-profile-freetime.png (Size: 83.94 KB / Downloads: 3)


.png   keexy-user.png (Size: 38.98 KB / Downloads: 4) ]]> <![CDATA[social media apps]]> https://forum.keexybox.org/Thread-social-media-apps Mon, 21 Dec 2020 14:00:28 +0000 zeyad]]> https://forum.keexybox.org/Thread-social-media-apps
Very impressive work, one question please :

Is it possible to block social media apps in profiles (Facebook, Instagram, ….etc.)?]]>
Very impressive work, one question please :

Is it possible to block social media apps in profiles (Facebook, Instagram, ….etc.)?]]> <![CDATA[Weird behaviour on Profiles/Devices]]> https://forum.keexybox.org/Thread-Weird-behaviour-on-Profiles-Devices Fri, 11 Dec 2020 18:35:28 +0000 ricardodiaz]]> https://forum.keexybox.org/Thread-Weird-behaviour-on-Profiles-Devices Hi,

The last week I installed the software on my Raspberry Pi3 and have been doing some testing.

I am running into the following problem:

I have a device to which I have assigned a certain profile:

[Image: Image1.png]

In connections, the device appears connected and with the correct profile assigned.

[Image: Image2.png]

But when consulting the statistics, the records generated by this device appear in a different profile ... in fact, if I go to view the associated connection, the profiles do not match.

I think the rules of the wrong profile are being applied...

[Image: Image3.png]

[Image: Image4.png]

I have tried restarting the connections, and even restarting the service ... but it remains the same ..

Am I doing something wrong?
Any ideas?

Thanks in advance...

EDIT:

I'm checking log files and on devices.log I can see that the device has assigned the profile ID 4


Code:
2020-12-11 19:48:45 - Enabling access for device Movil_Xiaomi_MiA3_Richi with profile ID 4, IP 192.168.0.128 and MAC 60:AB:67:86:45:E6

But on bind_queries.log, it seems that the rules applied for the device are those of profile ID 2...


Code:
11-Dec-2020 19:38:53.263 client @0x2502b58 192.168.0.128#7195 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.1$
11-Dec-2020 19:38:53.362 client @0x2502b58 192.168.0.128#18999 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.$
11-Dec-2020 19:38:53.395 client @0x2502b58 192.168.0.128#18081 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.$
]]> Hi,

The last week I installed the software on my Raspberry Pi3 and have been doing some testing.

I am running into the following problem:

I have a device to which I have assigned a certain profile:

[Image: Image1.png]

In connections, the device appears connected and with the correct profile assigned.

[Image: Image2.png]

But when consulting the statistics, the records generated by this device appear in a different profile ... in fact, if I go to view the associated connection, the profiles do not match.

I think the rules of the wrong profile are being applied...

[Image: Image3.png]

[Image: Image4.png]

I have tried restarting the connections, and even restarting the service ... but it remains the same ..

Am I doing something wrong?
Any ideas?

Thanks in advance...

EDIT:

I'm checking log files and on devices.log I can see that the device has assigned the profile ID 4


Code:
2020-12-11 19:48:45 - Enabling access for device Movil_Xiaomi_MiA3_Richi with profile ID 4, IP 192.168.0.128 and MAC 60:AB:67:86:45:E6

But on bind_queries.log, it seems that the rules applied for the device are those of profile ID 2...


Code:
11-Dec-2020 19:38:53.263 client @0x2502b58 192.168.0.128#7195 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.1$
11-Dec-2020 19:38:53.362 client @0x2502b58 192.168.0.128#18999 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.$
11-Dec-2020 19:38:53.395 client @0x2502b58 192.168.0.128#18081 (fr.app.chat.global.xiaomi.net): view view_profile_2: query: fr.app.chat.global.xiaomi.net IN A + (192.$
]]> <![CDATA[Profile confusion]]> https://forum.keexybox.org/Thread-Profile-confusion Sun, 27 Sep 2020 22:28:34 +0000 Mattallyc]]> https://forum.keexybox.org/Thread-Profile-confusion
Hoping you can help, today I installed KeexyBox and appear to have it running OK apart from one issue. I've created a profile called bedtime to schedule internet access times for certain devices and assigned them to this profile. If I look at devices under Connection Settings I can see they have the bedtime profile but if I look under Connections they still have the default profile. Therefore the bedtime profile rules aren't being activated. If I view the connection details from the Connections list it also says default.
Have I done something wrong or is there a bug?!

For info I downloaded the image and flashed it to an SD card as per the installation instructions.

Thanks for your help.

Regards,
Matt]]>
Hoping you can help, today I installed KeexyBox and appear to have it running OK apart from one issue. I've created a profile called bedtime to schedule internet access times for certain devices and assigned them to this profile. If I look at devices under Connection Settings I can see they have the bedtime profile but if I look under Connections they still have the default profile. Therefore the bedtime profile rules aren't being activated. If I view the connection details from the Connections list it also says default.
Have I done something wrong or is there a bug?!

For info I downloaded the image and flashed it to an SD card as per the installation instructions.

Thanks for your help.

Regards,
Matt]]>