Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. Adamm

    Release Asuswrt-Merlin 384.19 is now available

    Yes as there are other system files stored there.
  2. Adamm

    Release Asuswrt-Merlin 384.19 is now available

    You will need to format the JFFS partition to avoid errors in the future due to the resize; Administration - System - Format JFFS partition at next boot Tick yes then reboot.
  3. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    I don't use syncthing so I can't say exactly, but its probably just a false positive. No, you would need to use custom dnsmasq configuration.
  4. Adamm

    RT-AC3200 384.13_10 exploited - runtime.log / upgrade.sh / chkupdate.sh attack

    This strain has been around for quite some time now, the main method of infection is having the WebUI/SSH exposed to WAN. So as always, make sure to keep these disabled.
  5. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Any USB should do for Skynet, we only hit the filesystem for logging and config files.
  6. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    You can't add to it, you need to replace it entirely (that doesn't mean you cant use the original as a base to work from!)
  7. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    The malware blacklist feature requires a filter list as input, not an IP list. Using a custom filter list will replace the default one included that is linked above (and will survive reboots etc) Gotcha, in any case a DNS based solution is your best bet.
  8. Adamm

    Release Asuswrt-Merlin 384.19 is now available

    I don't think that saying accurately reflects modern software, unless you intentionally want an unsecure network.
  9. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Parental controls are a losing battle, any slightly tech savvy kid can and will bypass them weather it be via VPN, Proxy or Encrypted DNS
  10. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    You will need to find a DNS based solution.
  11. Adamm

    CakeQOS CakeQOS-Merlin

    No you don’t.
  12. Adamm

    386.1 Alpha?

    From my experience anything over 1.5GB isn't necessary, the compile time is mostly CPU bound.
  13. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    https://bfy.tw/P5da Not sure if you manually disabled a lot of those settings or if your config somehow got corrupted, but in any case I would uninstall/reinstall and start fresh as many are incorrect.
  14. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Your first issue is that your ISP modem isn't in bridge mode and you are running a double-nat situation. You will be unable to block this IP in Skynet effectively because its hosted on a CDN. We whitelist some major CDN's by default to prevent false positives. You will need to use something...
  15. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Most likely you had your WebUI/SSH exposed to WAN which is asking for trouble. Indicator of compromise
  16. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    An initial spike is to be expected but it should settle after a minute or so, if the CPU spike is prolonged then you can investigate with the top command. Solution That's completely normal and to be expected with logging enabled, Skynet will self-manage these logs and generate stats from them.
  17. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Adding onto Merlins post, the second warning should also be accurate (these are both IOC's of the same strand of malware); if [ -f "/jffs/chkupdate.sh" ] || [ -f "/tmp/update" ] || [ -f "/tmp/.update.log" ] || [ -f "/jffs/runtime.log" ] || grep -qF "upgrade.sh" "/jffs/scripts/openvpn-event"...
  18. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    Your list is in the wrong format, not only is it not a filter list (see the default list as an example), but it is also a domain list not an IP list which would be better suited for something like Diversion.
  19. Adamm

    amcfwm - AsusWRT-Merlin Custom Firmware Manager

    Under settings; [2] --> Stage Location | /home/skynet/images
  20. Adamm

    Skynet Skynet - Router Firewall & Security Enhancements

    AiProtect flagged a website you visited as malicious (aquawaterpurifiers.com), Skynet then used this flag to ban the corresponding IP. If this is causing false positives due to other sites on the same server, you can whitelist the IP with the following guide...
Top