KeexyBox's forum - Portal

WIZARD

Mon, 18 Sep 2023 14:48:27 +0000

Hi,
May i know how to activate the KeexyBox configuration Wizard page in the Keexyboc WEBUI? I need the URL to run the Configuration wizard again. Will appreciate if someone can help.

I have managed to install the KeexyBox software in Debian 11. I'm using Banana pi (BPI M2+) - Armbian 23.02.2 Bullseye Linux 5.15.93-sunxi. Everthing was working fine untill, for some reason, i cleared the Domain routing cache. Now, some of the services are not running. Unable to start them again either. (Screeshot attached).

I'm thinking if I can run the wizard again, I will be able to do the settings again.

Thanks,

Regards,

Emmanuel

Proxmox

Mon, 10 Jul 2023 07:33:53 +0000

is it possible to install keexybox intro virtual machine in proxmox ? how should I proceed? Thank you

Getting started

Mon, 03 Jul 2023 14:30:10 +0000

Hi - I'm reasonably tech-savvy but I am having trouble figuring out the initial setup for my use case.

I think I want a hybrid network topology, but I'm not sure.

My goal is to use keexybox to control internet access by my kids - they each have an iPad, and there is an AppleTV that they use which I would like to limit and manage. I would like to be able to schedule internet availability for these devices, and be able to pause/resume the internet when needed. Content filtering would be great too but it is less critical to me.

We have a ton of devices in the house, but I only really need to use keexybox to control the internet on the kids devices and appletv. The other devices in the home could continue to use the vanilla internet from my ISP unless there's a good reason to go through the keexybox.

I have a mesh router set up in a largish home, I would like to continue to use that wifi network as my network if at all possible.

Is there a guide for this kind of setup? I have been reading the docs but I am a little overwhelmed.

Thank you!!

Dual network interfaces not sticking in settings

Tue, 20 Jun 2023 23:07:33 +0000

Hi there. I'm running a Raspberry Pi 4b with the flashed SD card image, default config so far, trying unsuccessfully to use 2 network interfaces.

I'm aiming to position the Pi as a "man-in-the-middle" interface to ensure the features of KeexyBox can't be bypassed. My kids are getting to the age where they'd be smart enough to statically set an IP address and set the gateway to the router rather than KeexyBox. I don't want to allow them to do that.

I have the on-board interface and an external USB interface. Both are being recognised by the OS:

Code:
br0: flags=4163  mtu 1500

        inet 192.168.0.2  netmask 255.255.255.0  broadcast 192.168.0.255

        inet6 fe80::dea6:32ff:fe37:221c  prefixlen 64  scopeid 0x20

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

        RX packets 1775  bytes 234402 (228.9 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 445  bytes 56742 (55.4 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

br0:0: flags=4163  mtu 1500

        inet 192.168.1.2  netmask 255.255.255.0  broadcast 192.168.1.255

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

eth0: flags=4163  mtu 1500

        ether dc:a6:32:37:22:1c  txqueuelen 1000  (Ethernet)

        RX packets 1775  bytes 259252 (253.1 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 451  bytes 57066 (55.7 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4098  mtu 1500

        ether a8:63:7d:61:64:5d  txqueuelen 1000  (Ethernet)

        RX packets 0  bytes 0 (0.0 B)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 0  bytes 0 (0.0 B)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Despite both br0 and eth0 being up, I don't see eth0 as a selectable option in the admin, http://192.168.0.2:8001/config/network. Only eth1. If I select eth1 and reboot, it goes back to br0.

How can I get both physical network interfaces operational on two separate physical networks via those adapters?

iptables issue with timestart-timestop due to timezone

Thu, 12 Jan 2023 02:40:10 +0000

Hello everyone,

I found an issue that seems to be caused by iptables, but I wanted to check if it's known and if there are any workarounds.

My timezone is EST, which at the moment is UTC -05:00
I create a Schedule to give access on Wednesday from 18:00 to 20:00 EST.
This translates to Wednesday 23:00 to Thursday 01:00 UTC.

When I apply the Profile to a Device, it gets blocked at 19:00 EST.

The problem seems to be that the timestart and timestop parameters to iptables are translated to UTC, and this breaks the access.

Below is the iptables line created by KeexyBox.
-A FORWARD -m mac --mac-source nn:nn:nn:nn:nn:nn -m time --timestart 23:00:00 --timestop 01:00:00 --weekdays Wed -j 49_FORWARD

When the time is 19:00 EST, I think the following is what iptables interprets:

Time is 00:00 UTC
The timestart parameter is 23:00:00
00:00 is before the timestart parameter
iptables decides that the rule does not apply

I hope this all made sense :-)

Schedule does not seem to be working

Mon, 09 Jan 2023 18:52:56 +0000

Hello everyone,

I created a Profile with a schedule to only allow connections to the Internet during certain times of the day. I can see the Device is using the correct Profile, but I can still access the Internet on that Device outside of the Scheduled Time.

Below are the details of the Schedule configuration. (please see the attached file "Schedule Screenshot.jpg" for a screenshot of the schedule)
The goal is to allow access to the Internet only during the following times:

Monday through Thursday - 6:00pm to 7:00pm
Friday - 3:00pm to 10:00pm
Saturday - 12:00pm to 8:00pm

As a test, I browsed to a website today Monday at 1:25pm, which is outside of the Schedule, and I was able to access the Internet.
(please see the attached file "Access Log Screenshot.jpg" for a screenshot of the Access Log page)

If I click on the little "Eye Icon" in the Access Log page, it takes me to the Connection Information page for that Device, which confirms the correct Profile is being assigned.
(please see attached "Connection Information screenshot.jpg)

Any ideas of what I might be doing wrong?

Thanks in advance!

  Access Log Screenshot.jpg (Size: 150.15 KB / Downloads: 3)

  Connection Information Screenshot.jpg (Size: 139.2 KB / Downloads: 3)

  Schedule Screenshot.jpg (Size: 74.72 KB / Downloads: 3)

Custom iptables rules

Mon, 09 Jan 2023 15:49:29 +0000

Hi everyone,

I hope this is the correct place to post this.

I want to add a few custom rules to iptables and I want them to be applied at boot time. Unfortunately there is no place in the KeexyBox Web Gui to enter custom iptable rules.

I checked /opt/keexybox and /etc for clues, but could not find any.

Where can I add custom iptables rules so they are saved and not overwritten by KeexyBox at boot time?

Thanks in advance!

[RESOLVED] Install script failing on Raspberry Pi model 2B

Tue, 03 Jan 2023 14:22:21 +0000

I get the following error message:

Code:
Installing required Python modules...

Collecting mysql

Collecting MySQL-python

  Using cached https://files.pythonhosted.org/packages/a5/e9/51b544da85a36a68debe7a7091f068d802fc515a3a202652828c73453cad/MySQL-python-1.2.5.zip

Collecting mysql-connector

Collecting wget

Building wheels for collected packages: MySQL-python

  Running setup.py bdist_wheel for MySQL-python ... error

  Complete output from command /usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" bdist_wheel -d /tmp/tmptdBSvSpip-wheel- --python-tag cp27:

  running bdist_wheel

  running build

  running build_py

  creating build

  creating build/lib.linux-armv7l-2.7

  copying _mysql_exceptions.py -> build/lib.linux-armv7l-2.7

  creating build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/converters.py -> build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/connections.py -> build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/cursors.py -> build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/release.py -> build/lib.linux-armv7l-2.7/MySQLdb

  copying MySQLdb/times.py -> build/lib.linux-armv7l-2.7/MySQLdb

  creating build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/CR.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/FIELD_TYPE.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/ER.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/FLAG.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/REFRESH.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  copying MySQLdb/constants/CLIENT.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

  running build_ext

  building '_mysql' extension

  creating build/temp.linux-armv7l-2.7

  arm-linux-gnueabihf-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -Wdate-time -D_FORTIFY_SOURCE=2 -g -fdebug-prefix-map=/build/python2.7-HeKf1z/python2.7-2.7.13=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Dversion_info=(1,2,5,'final',1) -D__version__=1.2.5 -I/usr/include/mysql -I/usr/include/python2.7 -c _mysql.c -o build/temp.linux-armv7l-2.7/_mysql.o

  In file included from _mysql.c:46:0:

  /usr/include/mysql/mysql.h:285:14: error: duplicate member ‘reconnect’

   unsigned int reconnect;

                ^~~~~~~~~

  /usr/include/mysql/mysql.h:288:11: error: duplicate member ‘reconnect’

     my_bool reconnect;  /* set to 1 if automatic reconnect */

             ^~~~~~~~~

  error: command 'arm-linux-gnueabihf-gcc' failed with exit status 1

  ----------------------------------------

  Failed building wheel for MySQL-python

  Running setup.py clean for MySQL-python

Failed to build MySQL-python

Installing collected packages: MySQL-python, mysql, mysql-connector, wget

  Running setup.py install for MySQL-python ... error

    Complete output from command /usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-2N5i3k-record/install-record.txt --single-version-externally-managed --compile:

    running install

    running build

    running build_py

    creating build

    creating build/lib.linux-armv7l-2.7

    copying _mysql_exceptions.py -> build/lib.linux-armv7l-2.7

    creating build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/converters.py -> build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/connections.py -> build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/cursors.py -> build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/release.py -> build/lib.linux-armv7l-2.7/MySQLdb

    copying MySQLdb/times.py -> build/lib.linux-armv7l-2.7/MySQLdb

    creating build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/__init__.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/CR.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/FIELD_TYPE.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/ER.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/FLAG.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/REFRESH.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    copying MySQLdb/constants/CLIENT.py -> build/lib.linux-armv7l-2.7/MySQLdb/constants

    running build_ext

    building '_mysql' extension

    creating build/temp.linux-armv7l-2.7

    arm-linux-gnueabihf-gcc -pthread -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fno-strict-aliasing -Wdate-time -D_FORTIFY_SOURCE=2 -g -fdebug-prefix-map=/build/python2.7-HeKf1z/python2.7-2.7.13=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Dversion_info=(1,2,5,'final',1) -D__version__=1.2.5 -I/usr/include/mysql -I/usr/include/python2.7 -c _mysql.c -o build/temp.linux-armv7l-2.7/_mysql.o

    In file included from _mysql.c:46:0:

    /usr/include/mysql/mysql.h:285:14: error: duplicate member ‘reconnect’

     unsigned int reconnect;

                  ^~~~~~~~~

    /usr/include/mysql/mysql.h:288:11: error: duplicate member ‘reconnect’

       my_bool reconnect;  /* set to 1 if automatic reconnect */

               ^~~~~~~~~

    error: command 'arm-linux-gnueabihf-gcc' failed with exit status 1

    ----------------------------------------

Command "/usr/bin/python -u -c "import setuptools, tokenize;__file__='/tmp/pip-build-Zjx58n/MySQL-python/setup.py';f=getattr(tokenize, 'open', open)(__file__);code=f.read().replace('\r\n', '\n');f.close();exec(compile(code, __file__, 'exec'))" install --record /tmp/pip-2N5i3k-record/install-record.txt --single-version-externally-managed --compile" failed with error code 1 in /tmp/pip-build-Zjx58n/MySQL-python/

Errors on installing required packages

---- Checking installation of required packages for Keexybox ----

Checking installed packages

mariadb-server: OK

mariadb-client: OK

default-libmysqlclient-dev: OK

apache2: OK

libapache2-mod-php: OK

bridge-utils: OK

sudo: OK

ntp: OK

acl: OK

arp-scan: OK

php: OK

php-gettext: OK

php-gd: OK

php-intl: OK

php-json: OK

php-mysql: OK

php-readline: OK

php-curl: OK

python-pip: OK

python-dev: OK

python-mysqldb: OK

libproc-daemon-perl: OK

libfile-pid-perl: OK

Checking installed python modules

mysql: FAILED

MySQL-python: FAILED

mysql-connector: FAILED

wget: FAILED

-----------------------------------------------

Some required packages for Keexybox are missing

Installation aborted!

-----------------------------------------------

Upon inspection of the header file, it is a bit surprising to find reconnect being attempted to be defined in multiple places:

Code:
unsigned int reconnect;

unsigned int reconnect;

  enum mysql_status status;

  my_bool       free_me;                /* If free in mysql_close */

  my_bool       reconnect;              /* set to 1 if automatic reconnect */

Upon further re-runs and inspection, it appears that something is inserting the line below when it shouldn't and it's inserting it in a rather dumb way (doesn't check if this already exists and inserts it regardless)

Code:
unsigned int reconnect;

Upon checking further, the following code in "keexybox_21.04.2_raspios10/util/install_scripts/02_install_required_pkg.sh" seems to be adding the offending line:

Code:
# Fix issue when install MySQL connector for Python

sed '/st_mysql_options options;/a unsigned int reconnect;' /usr/include/mysql/mysql.h -i.bkp

Commenting out the 'sed' line as in below fixed the problem in the original post for me:

Code:
# Fix issue when install MySQL connector for Python

# sed '/st_mysql_options options;/a unsigned int reconnect;' /usr/include/mysql/mysql.h -i.bkp

Hardware

Tue, 27 Dec 2022 05:22:39 +0000

Hi Guys,

Thanks for the great software. This is regarding hardware for the software. Pi boards are hard to get nowadays. Is there an alternative hardware (similar to pi model) that can be used? Can it be installed in an android box? which is compact and so much easier to get.

Regards,

Emmanuel

Captive Portal Authentication success but no internet connected

Sun, 04 Dec 2022 09:23:27 +0000

installed Keexybox in debian in local machine and using router with virtual server , captive portal forwarded to public static ip all works fine and from public ip everything is working but no mac details fetched after authentication successful and after auth success not able to use internet in browser even not ping using cmd prompt, need to install keexybox in private cloud like aws or azure , it is possible to done authentication of remote users using wireless lan controlelr like tplink omada controller and tplink based access point with External Portal Server (using keexybox).

Note: using Access point (Tplink Eap225) MAC is showing blank in Keexybox and DHCP is not enabled in Keexybox.