Feature request: support blocklists

[amplatfus]

That's not a log file. It's just a dump of his iptables rules.

iptables -L -v -n

Thanks. It works normally
Now I have a question regarding direction src dst. As far as I can see in your (Edit: I observed that it was Nutz2U2's example. Sorry for confusion) case an in mine too I see [any] at both in/out even the block list is [BlockedCountries src] or [BlocklistComcastCIDR src,dst].

pkts bytes target prot opt in out source destination
67634 5488K DROP all -- any any anywhere anywhere match-set BlockedCountries src
7 500 DROP all -- any any anywhere anywhere match-set TorNodes src
0 0 ACCEPT all -- any any anywhere anywhere match-set I-BlocklistComcastCIDR src,dst

And I do not understand how direction list src/dst works. I apreciate any response.

Thank you in advance.

 

[redhat27]

@amplatfus you can also create an alias (in /jffs/config/profile.add, for example) as mentioned here to grep the output above for ipsets only

 

[amplatfus]

@amplatfus you can also create an alias (in /jffs/config/profile.add, for example) as mentioned here to grep the output above for ipsets only

Thank you for tip . I did it, but still not understand even I have only SRC (DST is not pressed) in the lists why at both in/out I got any in output:

 pkts bytes target     prot opt in     out     source               destination       
    0     0 DROP       all  --  any    any     anywhere             anywhere             match-set TBGHijackedCIDR src
    0     0 DROP       all  --  any    any     anywhere             anywhere             match-set TBGHijackedSingle src
    0     0 DROP       all  --  any    any     anywhere             anywhere             match-set AbuseSpyEyeCIDR src
    0     0 DROP       all  --  any    any     anywhere             anywhere             match-set AbuseSpyEyeCIDR src
    0     0 DROP       all  --  any    any     anywhere             anywhere             match-set AbuseSpyEyeSingle src

Many thanks!

 

[redhat27]

The src is the source of the internet traffic (packets coming in from outside) If src is mentioned, it means that IPs in that ipset will be blocked. If dst (destination: packets leaving your network to internet) is specified, it means you will not be able to connect to those IPs mentioned. If you are using the extended version of the script, you can specify on the last column what you want to block (or allow).

Briefly, src is inbound traffic, dst is outbound traffic

 

[amplatfus]

The src is the source of the internet traffic (packets coming in from outside) If src is mentioned, it means that IPs in that ipset will be blocked. If dst (destination: packets leaving your network to internet) is specified, it means you will not be able to connect to those IPs mentioned. If you are using the extended version of the script, you can specify on the last column what you want to block (or allow).

Briefly, src is inbound traffic, dst is outbound traffic

Yes. But in this case in the blockstats should be in out column none instead of all, right?

Thank you.

Sent from my ONE A2003 using Tapatalk

 

[redhat27]

The "in" and "out" columns refer to the network interfaces defined on your router. The columns are from the standard iptables -L -v output. The "all" in the "prot" column refers to all protocols like tcp/udp/icmp

 

[Nutz2U2]

Hi to All,

Here is a crazy question:-

What is going on here?

May 2 18:21:44 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:45 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:46 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:47 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:47 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:47 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:47 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:47 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesSingle blocklist with 23286 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded I-BlocklistPedophilesCIDR blocklist with 4875 entries
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:49 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel1 blocklist
May 2 18:21:55 rc_service: httpd 14864:notify_rc stop_vpnclient1
May 2 18:21:55 openvpn[14766]: SIGTERM[hard,init_instance] received, process exiting
May 2 18:22:14 rc_service: httpd 14864:notify_rc start_vpnclient1
May 2 18:22:17 openvpn[19066]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 10 2017
May 2 18:22:17 openvpn[19066]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
May 2 18:22:17 openvpn[19066]: daemon() failed or unsupported: Cannot allocate memory (errno=12)
May 2 18:22:17 openvpn[19066]: Exiting due to fatal error
May 2 18:22:17 syslog: VPN_LOG_ERROR: 522: Starting OpenVPN failed...
May 2 18:24:11 rc_service: httpd 14864:notify_rc start_vpnclient1
May 2 18:24:12 syslog: VPN_LOG_ERROR: 159: Creating tunnel interface tun11 failed...
May 2 18:25:40 rc_service: httpd 14864:notify_rc start_vpnclient1
May 2 18:25:40 syslog: VPN_LOG_ERROR: 159: Creating tunnel interface tun11 failed...
May 2 18:28:45 rc_service: httpd 14864:notify_rc start_vpnclient1
May 2 18:28:45 syslog: VPN_LOG_ERROR: 159: Creating tunnel interface tun11 failed...
May 2 18:29:03 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel1Single blocklist with

Is the script running multiple times or just that how it reports it'self in the log ??

Obviously the Router won't work till everything is loaded / running / configured. To me every minute off-line is a minute off-line and to a certain degree insecure. So the quicker the router runs - the quicker the network is secure.

Otherwise the scripts all run fine - just want to make sure they are running correctly and efficient.

 

[redhat27]

Your firewall-start has been invoked more than once, Can you remove the /jffs/scripts/iblocklist-loader call out of firewall-start completely and put the call into services-start and reboot your router? I believe that will fix this issue

 

[Nutz2U2]

Hi redhat27,

Fixed .

Hi redhat27,

May 2 20:26:08 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel1Single blocklist with 25639 entries
May 2 20:26:11 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel1CIDR blocklist with 222558 entries
May 2 20:26:11 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel2 blocklist
May 2 20:26:48 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel2Single blocklist with 3600 entries
May 2 20:26:49 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel2CIDR blocklist with 83962 entries
May 2 20:26:50 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackLevel3 blocklist
May 2 20:26:58 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel3Single blocklist with 498 entries
May 2 20:26:58 Firewall: /jffs/scripts/iblocklist-loader: Loaded BluetackLevel3CIDR blocklist with 19031 entries
May 2 20:26:59 Firewall: /jffs/scripts/iblocklist-loader: Started processing BluetackEdu blocklist

Fixed. Thanking You. Router is buzzing again .........