Skynet New Skynet 7.6.3 Release

[Quoc Huynh]

Clicking on "Adaptives QoS" in router main menu and then switching to Syslog causes Skynet to restart.
Can someone confirm?
And is that a normal behaviour?

I do not have this issue with Skynet on my RT-AX88U.

 

[Adamm]

Hello everybody, I faced strange issue and can't find out the reason or fixing method. Do anybody have an idea where to dig and how to fix that?

The Skynet installed on new system after reseting router, changing pluged to the router hdd, formating it and reinstalled Entware, amtm etc.

[1-5]: 2

Input Custom Filter List URL:

[URL]: https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

[$] /jffs/scripts/firewall banmalware https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

=============================================================================================================

killall: syslog-ng: no process killed

[i] Custom Filter Detected: https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

[i] Downloading filter.list | [0s]

[i] Refreshing Whitelists | [7s]

[i] Consolidating Blacklist | [0s]

[*] List Content Error Detected - Stopping Banmalware

=============================================================================================================

[#] 1 IPs (+0) -- 0 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [banmalware] [7s]

[i] Press Enter To Continue...

P.s. any other links (ViktorJp or Somewhere Over The Raibow) are not working too

Does your isp resolve GitHub correctly? There’s been issues in the past where ISP’s have GitHub raw blocked.

 

[ukrainer]

I have the same problem with Skynet on an RT-AX88U like him as well. It is quite interesting that Skynet is working fine with Adamm default filter list, or list imported years before. However, when trying to import your list or Somewhere Over The Rainbow, the script shows a "List Content Error" message, and refused to use the new firewall list.
I was succeed with importing Somewhere Over The Rainbow list about 2 weeks ago, but now it may not work anymore. Therefore, I supposed the cause would be either Skynet itself, or the way Github formats their file storage @@

If so then solution is possible by improving algorithms of Skynet which are using for processing other kinds of filter lists...

 

[ukrainer]

Does your isp resolve GitHub correctly? There’s been issues in the past where ISP’s have GitHub raw blocked.

Yes, I open any files from this link as proper in the browser. We can compare what i get opening some specific link and what you get, to be sure there is no problem on the ISP side. But for now I don't see there any issues caused by ISP.

 

[SomeWhereOverTheRainBow]

Yes, I open any files from this link as proper in the browser

A true test is to perform a lookup to the domain from your router. It is known that a web browser can use a builtin DNS functionality to circumvent the ISP DNS, whereas skynet relies on the DNS services used by the router. The router will use the ISP by default unless you have a way around that enabled on the router.

 

[ukrainer]

A true test is to perform a lookup to the domain from your router. It is known that a web browser can use a builtin DNS functionality to circumvent the ISP DNS, whereas skynet relies on the DNS services used by the router. The router will use the ISP by default unless you have a way around that enabled on the router.

I did nslookup, traceroute and ping from the router to raw.githubusercontent.com and no issues found, but the filter lists from this source are still not working or work unstable (I could get filter update from raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list but still get issues after tries of getting updates of other filter lists from source raw.githubusercontent.com). So it is definitely not ISP related issue

 

[SomeWhereOverTheRainBow]

I did nslookup, traceroute and ping from the router to raw.githubusercontent.com and no issues found, but the filter lists from this source are still not working or work unstable (I could get filter update from raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list but still get issues after tries of getting updates of other filter lists from source raw.githubusercontent.com). So it is definitely not ISP related issue

If you have ipv6 enabled, disable it. I have seen when ipv6 is not correctly working, users have issues resolving from the router sometimes. <<--- This is just another possible place to check.
Also, check to make sure the routers ntp clock is set right. curl may be giving issues because of the time not being set correctly. <<--- Another place to check.

 

[ukrainer]

If you have ipv6 enabled, disable it. I have seen when ipv6 is not correctly working, users have issues resolving from the router sometimes. <<--- This is just another possible place to check.
Also, check to make sure the routers ntp clock is set right. curl may be giving issues because of the time not being set correctly. <<--- Another place to check.

Just turned off ipv6 support on the router and tried change filter list for:

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/filter.list

Or

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

Or

https://raw.githubusercontent.com/poudenes/skynet/main/filter.list

But nothing changed

 

[SomeWhereOverTheRainBow]

Just turned off ipv6 support on the router and tried change filter list for:

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/filter.list

Or

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

Or

https://raw.githubusercontent.com/poudenes/skynet/main/filter.list

But nothing changed

This one will never work properly: https://raw.githubusercontent.com/poudenes/skynet/main/filter.list
because of this link https://github.com/firehol/blocklist-ipsets/ being present in the list.
It is downloading a full blown web page instead of a raw list. You could possibly be corrupting skynet with this list.
The link would be fine to be in the list if it was commented out.
like #https://github.com/firehol/blocklist-ipsets/
The only way to fix a corrupted skynet is a complete uninstall of skynet, then a complete reinstall.
Do not try https://raw.githubusercontent.com/poudenes/skynet/main/filter.list, until that link is commented out or removed from that list.

 

[ukrainer]

It seems the list https://github.com/firehol/blocklist-ipsets/ really corrupted my Skynet. But I found the second reason of my issue too - I used DNS-over-TLS and one of choosen DNS servers worker improper. So I totally uninstalled Skynet, reseted WAN DNS settings and setted them again in a proper way. Now two custom lists as the original one are working and updating correctly. Thank you for support!

 

[bibikalka]

Why did Skynet checksum change - the version stated the same, 7.5.9. See the 2 screenshots.

I am running an older dnsmasq (2.89) on top of the latest FW trying to sort out some issues, but I would not think it matters?

 

[ColinTaylor]

Why did Skynet checksum change - the version stated the same, 7.5.9. See the 2 screenshots.

Because this minor commit was made without changing the version number.

 

[SomeWhereOverTheRainBow]

Because this minor commit was made without changing the version number.

For a minor commit, that was definitely a good catch.

 

[John Fitzgerald]

New Release 7.6.0

Per Adamm:

v7.6.0 · Adamm00/IPSet_ASUS@087f30c

3006 branch support Remove IPSet comment check as no longer applicable Add Public IP Address test to make it more obvious Add support for searching stats via domain, eg "stats search domain xx...

github.com

IPSet_ASUS/firewall.sh at master · Adamm00/IPSet_ASUS

Skynet - Advanced IP Blocking For ASUS Routers Using IPSet. - Adamm00/IPSet_ASUS

github.com

mentioned in post #9,

Skynet - Skynet on GT-BE 98 Pro

GT-BE98 Pro fails with error IPSet extension not supported, please update router to latest Firmware version. I am on latest firmware for the router 3006.102.1-beta 1 Steps To Reproduce Issue amtm i 2 Expected Behaviour Skynet installs successfully Output of ( sh /jffs/scripts/firewall debug...

www.snbforums.com

"I was going to wait for updated Gnuton builds but as that may be longer then anticipated I've pushed v7.6.0"

 

[Mutzli]

New Release 7.6.1

https://github.com/Adamm00/IPSet_ASUS/commit/51c89ce0706d823477ef2cf7946e292b484077e8

 

[heysoundude]

New Release 7.6.1

https://github.com/Adamm00/IPSet_ASUS/commit/51c89ce0706d823477ef2cf7946e292b484077e8

updated

 

[vibroverbus]

Anybody having trouble with Skynet? Hanging after the usual failed lock file error. Router acting strange. Wondering if I'm compromised.

 

[vibroverbus]

Anybody having trouble with Skynet? Hanging after the usual failed lock file error. Router acting strange. Wondering if I'm compromised.

Restored a backup from last week, then re-installed Skynet and all looks OK. Weird. Hope for the best.
EDIT: maybe not. uggh. not what I needed today.

 

[saison2023]

Restored a backup from last week, then re-installed Skynet and all looks OK. Weird. Hope for the best.
EDIT: maybe not. uggh. not what I needed today.

Not related to Skynet but I had to factory reset my router recently, because I had a lot of "dnsmasq" errors in the logs. It was strange because it was running fine until these errors.
Before the factory reset, I tried few things (like uninstalling and reinstalling scripts, format drive, ...) without success.
I finally had to factory reset the router, format my SSD drive in extFAT and a second time in NTFS (not really needed but I wanted to double check the health status of the drive).
Configuring router and reinstalling addons from scratch seem to "do the job", no error since then. I am monitoring closely and no strange behaviour.
Not really an enjoyable moment but it was needed step to return to a stable situation.

 

[Viktor Jaep]

Anybody having trouble with Skynet? Hanging after the usual failed lock file error. Router acting strange. Wondering if I'm compromised.

Anything unusual in the syslog?