AiProtection - no hits at all

[bennor]

But you opened the door to Trend Micro. J'ai préféré ne rien activer et ne rien partager avec eux. Famille de 4 plus plein de bidules connectés et je n'ai qu'un script qui tourne, un bloqueur de pubs qui sert à tout le monde puisqu'au niveau routeur.

English please.

 

[Morris]

But you opened the door to Trend Micro. J'ai préféré ne rien activer et ne rien partager avec eux. Famille de 4 plus plein de bidules connectés et je n'ai qu'un script qui tourne, un bloqueur de pubs qui sert à tout le monde puisqu'au niveau routeur.

Then you should stop using credit cards, and also not drive your car as both are tracked.

 

[Rhialto]

Then you should stop using credit cards, and also not drive your car as both are tracked.

Don't worry, I do more that what the population do and always give hints to my sons and girlfriend.

 

[SolCutter]

Thanks.
Before I do something stupid, does the command work with the latest version ? (RT-AX88U - 3004.388.6_2)

rm -rf /jffs/.sys/AiProtectionMonitor/*

This is the method that worked for me along with uploading the latest version of merlin after disabling AiProtect.

1. Disable AiProtect (withdraw agreement under admin--policy)
2. SSH to delete AiProtect database & reboot
3. Load the version you currently have installed or a new version of Merlin. Does not require a complete reset to default settings.
4. After firmware has been reloaded, login and then enable AiProtect--agree to terms.

If I just deleted the DB file it would work initially and then fail or not provide the lovely Asus/Trend screen for blocking and therefore wouldn't log the block to the DB.


I tested with one of the blocks it had previously made as well as the wicar test site:

UPDATE: It seems that this was being caused when I activated DNS Director to filter DNS request. It may have been in combination with Diversion/DNSmasq, which I initially tested without Diversion and have now put Diversion back on the system. I won't be going back to DNS Director for now as I don't want to spend any additional time reloading the firmware. Will monitor and reply if the problem comes back. If this happens to anyone else may be a good idea to tag the relevant developers...

Test Malware!

Each test will open up a new browser window at http://malware.wicar.org/. You may wish to try each test systematically. Ideally, all tests should be blocked by your anti-malware defences. If a blank...

www.wicar.org

 

[Treadler]

I have used Aiprotect over a long period of time, including with brand new, never before used routers.
I have yet to see a screen warning, or any breaches logged on the Aiprotect page.
Wondering if I should just turn it off?

 

[SolCutter]

I have used Aiprotect over a long period of time, including with brand new, never before used routers.
I have yet to see a screen warning, or any breaches logged on the Aiprotect page.
Wondering if I should just turn it off?

If you use Skynet and Diversion there's a pretty good chance you won't see anything, because they both download blocklist-I believe Skynet does this daily if you choose & Diversion is up to twice a week. The default setup for Skynet has an "import Aiprotect data" option and you will be less likely to see it if you left this option enabled. I've turned it off as I want to know if AiProtect is working when I check. If you use the Wicar test in the link above (I believe those are whitelisted on Skynet & diversion) so you should see the Asus/Trend warning page when you run the Wicar test. If you use one of the adblocking DNS forwarder servers then this too may filter some of the trash. The point in having all this is that if one thing fails then something else will pick it up, and finally if it gets to your computer then your A/V and/or browser will likely pick it up. I do know that mine has worked in the past and sometimes catches things that aren't caught by the customizations. The IDS/IPS of the AiProtect found a botnet cryptominer on my son's machine a couple of years back and the block malicious websites usually increases in count every so often when I check the reports.

 

[Tech9]

I have yet to see a screen warning

Modern Web browsers use Safe Browsing and already filter what AiProtection filters on a client level before AiProtection. In order to trigger router filtering you have to disable Safe Browsing.

 

[Mogsy]

http://wrs49.winshipway.com/

Still gives me AiProtect block page