Skynet Is default firewall good enough?

[SomeWhereOverTheRainBow]

I been using your list for few months. Is this the current list? If I remember correctly it used to be around 170k. The IP list almost doubled?

328944 IPs (+0) -- 9095 Ranges Banned (+0) || 19740 Inbound -- 2098 Outbound Connections Blocked!

481911 IPs

try this feed:

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/ipv4.feed

 

[SomeWhereOverTheRainBow]

Do you add this in 5 > 1 in Skynet?

I use levels 1 thru 7 in my skynet. I am still trying it out though which is the reason why i havent officially added it to my online published skynet filter list

 

[Viktor Jaep]

Do you add this in 5 > 1 in Skynet?

No... actually you need to switch to a different filter list in order to use this... under 3 -> 2

And then insert this URL:

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

(or one of your own choosing/making)

 

[Viktor Jaep]

I use levels 1 thru 7 in my skynet.

It seems 1.txt may have been causing some false positives... I backed off on both 1 & 2 at the moment. Might bring #2 back down the road.

 

[SomeWhereOverTheRainBow]

It seems 1.txt may have been causing some false positives... I backed off on both 1 & 2 at the moment. Might bring #2 back down the road.

I don't have these concerns with a whitelist like this,

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/allowv4.feed

 

[Skeptical.me]

No... actually you need to switch to a different filter list in order to use this... under 3 -> 2

And then insert this URL:

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

(or one of your own choosing/making)

Great, done, thanks!

 

[SomeWhereOverTheRainBow]

@Skeptical.me @Viktor Jaep

Here is how I generate my blocklist.

{curl -fsSL --retry 3 --connect-timeout 3 "https://iplists.firehol.org/files/a - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com

 

[Viktor Jaep]

@Skeptical.me @Viktor Jaep

Here is how I generate my blocklist.

{curl -fsSL --retry 3 --connect-timeout 3 "https://iplists.firehol.org/files/a - Pastebin.com

Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.

pastebin.com

You, sir, are a mad, scripting genius!

 

[SomeWhereOverTheRainBow]

You, sir, are a mad, scripting genius!

and I don't mind sharing if it helps someone else.

 

[Viktor Jaep]

I don't have these concerns with a whitelist like this,

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/allow.feed

So question for you @SomeWhereOverTheRainBow ... when you run your script that combines all those blocklists together into one feed, how do you copy that back out from your side to github automatedly?

 

[SomeWhereOverTheRainBow]

So question for you @SomeWhereOverTheRainBow ... when you run your script that combines all those blocklists together into one feed, how do you copy that back out from your side to github automatedly?

A Secure api method. At somepoint when I feel more comfortable using github workflows I might set it up there.

 

[Skeptical.me]

You, sir, are a mad, scripting genius!

Viktor, how do I create my own list, just thought I'd ask so I can figure it out myself in the future. thanks.

 

[Mogsy]

Viktor, how do I create my own list, just thought I'd ask so I can figure it out myself in the future. thanks.

Create github acc, copy his list and add yours in

 

[Viktor Jaep]

Create github acc, copy his list and add yours in

@Skeptical.me this is correct. Just create a list of urls pointing to similar plaintext IP4 blacklists, and make it publicly available so you can point to it with a URL within skynet, then you're all set! (Poet?) Feel free to use mine or @SomeWhereOverTheRainBow's as examples!

 

[Bogey]

@Bogey ... please go ahead and update the malware blacklist in skynet, and please let me know if you see any better results?

So far, so good

 

[commodoro]

Create github acc, copy his list and add yours in

Since I was also interested in using a personal list, but not having an account on github, I studied the script code a bit and did a little trick to read a file directly on the router.

first I created the filter.list file in the following path:

/jffs/configs/filter.list

copied inside as an example the following URLS

https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/4.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/5.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/6.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/7.txt
https://iplists.firehol.org/files/alienvault_reputation.ipset
https://iplists.firehol.org/files/bds_atif.ipset
https://iplists.firehol.org/files/cybercrime.ipset
https://iplists.firehol.org/files/dyndns_ponmocup.ipset
https://iplists.firehol.org/files/et_block.netset
https://iplists.firehol.org/files/et_compromised.ipset
https://iplists.firehol.org/files/firehol_level2.netset
https://iplists.firehol.org/files/firehol_level3.netset
https://iplists.firehol.org/files/spamhaus_edrop.netset
https://iplists.firehol.org/files/urlvir.ipset

then I modified the skynet.cfg configuration file in the skynet installation path and modified the configuration entry as follows:

customlisturl="file:///jffs/configs/filter.list"

and via the firewall script menu launched the update (3 > 1) and everything worked properly.



I don't know if it can be useful but I wanted to share my experience

Greetings
Commodoro

 

[Viktor Jaep]

customlisturl="file:///jffs/configs/filter.list"

and via the firewall script menu launched the update (3 > 1) and everything worked properly.

I don't know if it can be useful but I wanted to share my experience

Greetings
Commodoro

Awesome! I was wondering if it was possible to do that, instead of it needing a publicly available URL. Really great to know this! Thanks much @commodoro!!

 

[Mogsy]

Since I was also interested in using a personal list, but not having an account on github, I studied the script code a bit and did a little trick to read a file directly on the router.

first I created the filter.list file in the following path:

/jffs/configs/filter.list

copied inside as an example the following URLS

https://raw.githubusercontent.com/stamparm/ipsum/master/levels/3.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/4.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/5.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/6.txt
https://raw.githubusercontent.com/stamparm/ipsum/master/levels/7.txt
https://iplists.firehol.org/files/alienvault_reputation.ipset
https://iplists.firehol.org/files/bds_atif.ipset
https://iplists.firehol.org/files/cybercrime.ipset
https://iplists.firehol.org/files/dyndns_ponmocup.ipset
https://iplists.firehol.org/files/et_block.netset
https://iplists.firehol.org/files/et_compromised.ipset
https://iplists.firehol.org/files/firehol_level2.netset
https://iplists.firehol.org/files/firehol_level3.netset
https://iplists.firehol.org/files/spamhaus_edrop.netset
https://iplists.firehol.org/files/urlvir.ipset

then I modified the skynet.cfg configuration file in the skynet installation path and modified the configuration entry as follows:

customlisturl="file:///jffs/configs/filter.list"

and via the firewall script menu launched the update (3 > 1) and everything worked properly.

View attachment 46948

I don't know if it can be useful but I wanted to share my experience

Greetings
Commodoro

Thank you for sharing! Will give this a try later. I only created github because of the list lol

 

[JTnola]

FYI do not update Skynet, stay on 7.2.8.

Why?

 

[TonyK132]

For the blocking lists, this discussion has been to use Skynet to do the blocking. But what if you added a blocking list to Diversion, say firehol_level1? Is it equally as effective as adding it to Skynet?