Skynet Skynet - Router Firewall & Security Enhancements

[^Tripper^]

Has anyone noticed any ill effects from banning countries such as Russia, China, Nigeria etc.

Sent from my SM-G965F using Tapatalk

I’ve blocked CN. Worse effect was the wife getting upset she couldn’t do her online shopping. And trust me, it’s a terrible effect.

 

[bitmonster]

Right well that confirms China is banned then. And the rest. Although I'm sure it only captures a fraction of it as they would all use botnets these days. Anyway, it's a good start.

Now if only we could also block all email from Nigeria, Russia etc.

 

[Adamm]

@Adamm - I know you just pushed an update; food for thought / next update... To preclude this country ban confusion, what if you had a menu item like

This information was already available in various places, but as per request I've also added it to that menu also. No version change so you will need a force update to see the changes.

Has anyone noticed any ill effects from banning countries such as Russia, China, Nigeria etc.

Sent from my SM-G965F using Tapatalk

Country bans are just as described, the entire country gets blocked. So false positives depending on what you ban are to be expected.

I’ve blocked CN. Worse effect was the wife getting upset she couldn’t do her online shopping. And trust me, it’s a terrible effect.

Can only fix the code I'm afraid, the wife can't be fixed

 

[M@rco]

Skynet be like...

[i] Checking Inbound Filter Rules...

... [Passed]

 

[thelonelycoder]

Skynet be like...

[i] Checking Inbound Filter Rules...

... [Passed]

That's a repost! Downvote coming your way! (as seen in reddit comments)

 

[thelonelycoder]

Can only fix the code I'm afraid, the wife can't be fixed

Here's the deal @Adamm : You add a wf function similar to fs in Diversion, I'll add the www/non-www function to Diversion whitelisting

 

[^Tripper^]

Can only fix the code I'm afraid, the wife can't be fixed

A jug of chilled, tasty beer for the first person who can implement some sort of wife filter!

 

[Adamm]

Here's the deal @Adamm : You add a wf function similar to sf in Diversion, I'll add the www/non-www function to Diversion whitelisting

 

[thelonelycoder]

Damn.

 

[martinr]

....
Now if only we could also block all email from Nigeria, Russia etc.

You’re on Hotmail perhaps? Gmail is very good at intelligently blocking such stuff. But when I get such emails in my Hotmail junk, I forward them to me@rescam.org where “a proxy email address will start replying to the scammer for you, doing its very utmost to waste their time. ”. It doesn’t block the emails, but it might give you a sense of satisfaction.

 

[M@rco]

I forward them to me@rescam.org where “a proxy email address will start replying to the scammer for you, doing its very utmost to waste their time.

Looks like re:scam bot is taking some time off..

After sending
1,012,531 emails
and wasting more than
5 years of scammers' time,
I'm currently offline while Phase II is being tested for launch.

 

[Adamm]

I've pushed v6.5.0

This update adds "fast switching" for banamlware filters, AKA wife mode. Usage is pretty straight forward;

Enable/Configure "wife mode" with specified custom filter URL;

sh /jffs/scripts/firewall wm www.google.com/filter.list

Toggle "wife mode" on/off

sh /jffs/scripts/firewall wm

This functionality can also be configured via the settings menu option, or toggled quickly using "wm" in the main menu.

NOTE;

Wife mode's custom filter will override banmalware updates until disabled.

@thelonelycoder

 

[M@rco]

This update adds "fast switching" for banamlware filters, AKA wife mode.

Thanks, great work @Adamm!

 

[thelonelycoder]

Wife mode's custom filter will override banmalware updates until disabled.

@thelonelycoder

Well done!
Not related, but I pushed the amtm 1.4 update a few minutes earlier than you did!

Now, I'll have to look AGAIN at that MONSTER code that drives the el function in Diversion. Not looking forward to it.

 

[Adamm]

Well done!
Not related, but I pushed the amtm 1.4 update a few minutes earlier than you did!

I saw, looks good, version numbers are very handy.

Now, I'll have to look AGAIN at that MONSTER code that drives the el function in Diversion. Not looking forward to it.

Tell me about it, spent an hour going through all if/else statements avoiding conflicts without trying to repeat code

 

[^Tripper^]

@Adamm

Woah. You’re amazingly fast. You should run Apple or something.

Time to test it with the monst.. I mean wife.

 

[thelonelycoder]

Toggle "wife mode" on/off

Any way to detect that Skynet wm is configured and ready for fast switch?

 

[Adamm]

Any way to detect that Skynet wm is configured and ready for fast switch?

If configured, in the config file (skynet.cfg).... $customlist2url will have a value (which should be a url)

Then if currently active, $wifemode will have the value "enabled" in the same config file.

 

[Tekneek]

I have a recursive DNS server on my network. As a result, blocking by country had some repercussions, as various DNS servers ended up being in some of those ranges. If you don't have any service running that needs to be able to communicate like that, you probably won't see much harm from blocking a few (such as CN, RU, AF).

 

[Ubimo]

Show debug log does not work as intended:

[1-15]: 12

Select Debug Option:
[1] --> Show Debug Entries As They Appear
[2] --> Print Debug Info
[3] --> Cleanup Syslog Entries
[4] --> SWAP File Management
[5] --> Backup Skynet Files
[6] --> Restore Skynet Files

[1-6]: 1

Select Watch Option:
[1] --> All
[2] --> IP
[3] --> Port

[1-3]: 1

[$] /jffs/scripts/firewall debug watch

[*] Debug Mode Is Disabled - Exiting!

admin@xxxxxxx:/tmp/home/root#