Skynet Skynet - Router Firewall & Security Enhancements

[Makaveli]

While I didn't have the same issue as yourself, I just reformatted and re-installed.

edit: oops misunderstood

Have no problem wiping jffs was just hoping there was a quicker way to just do skynet as that is the only script giving me an issue right now the rest are fine.

 

[Adamm]

Some corruption so I will have to reinstall it.

just do skynet as that is the only script giving me an issue right now

Please elaborate on "some corruption".

Also;

sh /jffs/scripts/firewall uninstall

 

[nakti]

Is there any WebUI for skynet directly in the router?

 

[martinr]

Is there any WebUI for skynet directly in the router?

No. Are you unfamiliar with SSH? When you connect by SSH and especially when you have installed AMTM, you have the next best thing to a webUI.

 

[nakti]

No. Are you unfamiliar with SSH? When you connect by SSH and especially when you have installed AMTM, you have the next best thing to a webUI.

Hi no I can handle SSH I just wondered but will try AMTM

 

[Ubimo]

Today, I got this:

Select Option:
[1]  --> Update
[2]  --> Change Filter List
[3]  --> Reset Filter List
[4]  --> Exclude Individual Lists
[5]  --> Reset Exclusion List

[1-5]: 1

[$] /opt/bin/skynet banmalware


================================================================================


[i] Custom Filter Detected: https://pastebin.com/raw/CAivj3C7
[i] Downloading filter.list         | [0s]
[i] Refreshing Whitelists           | /opt/bin/skynet: line 5076: can't fork
[13s]
[i] Consolidating Blacklist         | [10s]
[i] Filtering IPv4 Addresses        | [4s]
[i] Filtering IPv4 Ranges           | [1s]
[i] Applying New Blacklist          | [10s]
[i] Refreshing AiProtect Bans       | [2s]

What does this mean and how do I solve it?
Edit:
I ran update banmalware again, the error is gone now.

 

[Adamm]

Is there any WebUI for skynet directly in the router?

Not at this time due to technical limitations.

What does this mean and how do I solve it?
Edit:
I ran update banmalware again, the error is gone now.

Usually this indicates an issue with your SWAP file, but as its resolved I guess there's no need to worry.

 

[nakti]

Not at this time due to technical limitations.

Thanks

 

[Makaveli]

Please elaborate on "some corruption".

Also;

sh /jffs/scripts/firewall uninstall

I think some of the files on the usb key got damaged.

So basically skynet is running because I can see it blocking items in the system log.

but when I try to launch skynet the splash screen will load just the top part of it and never finishes.

 

[Butterfly Bones]

I think some of the files on the usb key got damaged.

So basically skynet is running because I can see it blocking items in the system log.

but when I try to launch skynet the splash screen will load just the top part of it and never finishes.

I had that happen when I did some silly additions in another script that caused ntpd not to sync. Is your router time ok and ntp is working?

 

[Makaveli]

I had that happen when I did some silly additions in another script that caused ntpd not to sync. Is your router time ok and ntp is working?

I believe is maybe some kind of NTP issue also. I removed NTP merlin just enabled the local NTP server in 384.11 and bam its working now. Thank you sir I will reinstall NTP merlin when I get home from work and check skynet again later.

 

[Butterfly Bones]

I believe is maybe some kind of NTP issue also. I removed NTP merlin just enabled the local NTP server in 384.11 and bam its working now. Thank you sir I will reinstall NTP merlin when I get home from work and check skynet again later.

Yeah, I tried to make a stubby.yml.add file that caused ntpd sync to stop. Good you got it working for now and can thoroughly investigate later.

 

[QuikSilver]

Updated and noticed diversion was waiting and waiting on skynet...told me to eventually restart manually. went into skynet using amtm to restart and when i press 2 it gives me this...

Boot Args; /jffs/scripts/firewall start skynetloc=tmp/mnt/SDA1/skynet
/jffs/scripts/firewall: line 1: arithmetic syntax error

 

[QuikSilver]

Updated and noticed diversion was waiting and waiting on skynet...told me to eventually restart manually. went into skynet using amtm to restart and when i press 2 it gives me this...

Boot Args; /jffs/scripts/firewall start skynetloc=tmp/mnt/SDA1/skynet
/jffs/scripts/firewall: line 1: arithmetic syntax error

For anyone else with this issue, I "reinstalled" the script using the command on the 1st page. Then tweaked my settings and added back my blocked countries.

 

[Jumpstarter]

i am trying to determine who is this IP 168.95.245.1 and 152.199.0.100

 

[CaptainSTX]

I use ipinfo.io. Go to that link and then type in the IPs you are interested in and it will give you some information.

Unfortunately the info won't be that useful.

 

[Twiglets]

i am trying to determine who is this IP 168.95.245.1 and 152.199.0.100

Source: whois.apnic.net
IP Address: 168.95.245.1
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '168.95.0.0 - 168.95.255.255'

% Abuse contact for '168.95.0.0 - 168.95.255.255' is 'hostmaster@twnic.net.tw'

inetnum: 168.95.0.0 - 168.95.255.255
netname: HINET-NET
descr: Data Communication Business Group,
descr: Chunghwa Telecom Co.,Ltd.
descr: No.21, Sec.1, Xinyi Rd., Taipei City
descr: 10048, Taiwan
country: TW
admin-c: HN27-AP
tech-c: HN27-AP
mnt-by: MAINT-TW-TWNIC
mnt-irt: IRT-TWNIC-AP
status: ALLOCATED PORTABLE
last-modified: 2013-12-04T12:38:06Z
source: APNIC

irt: IRT-TWNIC-AP
address: Taipei, Taiwan, 100
e-mail: hostmaster@twnic.net.tw
abuse-mailbox: hostmaster@twnic.net.tw
admin-c: TWA2-AP
tech-c: TWA2-AP
auth: # Filtered
remarks: Please note that TWNIC is not an ISP and is not empowered
remarks: to investigate complaints of network abuse.
mnt-by: MAINT-TW-TWNIC
last-modified: 2015-10-08T07:58:24Z
source: APNIC

person: HINET Network-Adm
address: CHTD, Chunghwa Telecom Co., Ltd.
address: No. 21, Sec. 21, Hsin-Yi Rd.,
address: Taipei Taiwan 100
country: TW
phone: +886 2 2322 3495
phone: +886 2 2322 3442
phone: +886 2 2344 3007
fax-no: +886 2 2344 2513
fax-no: +886 2 2395 5671
e-mail: network-adm@hinet.net
nic-hdl: HN27-AP
remarks: same as TWNIC nic-handle HN184-TW
mnt-by: MAINT-TW-TWNIC
last-modified: 2011-08-22T06:04:01Z
source: APNIC

% Information related to '168.95.245.0 - 168.95.245.255'

inetnum: 168.95.245.0 - 168.95.245.255
netname: HINET-NET
descr: Taipei Taiwan
country: TW
admin-c: HN184-TW
tech-c: HN184-TW
mnt-by: MAINT-TW-TWNIC
remarks: This information has been partially mirrored by APNIC from
remarks: TWNIC. To obtain more specific information, please use the
remarks: TWNIC whois server at whois.twnic.net.
changed: network-adm@hinet.net 19900101
status: ASSIGNED NON-PORTABLE
source: TWNIC

person: HINET
address: Taipei Taiwan
country: TW
e-mail: network-adm@hinet.net
nic-hdl: HN184-TW
changed: hostmaster@twnic.net.tw 20130307
source: TWNIC

% This query was served by the APNIC Whois Service version 1.88.15-46 (WHOIS-US3)


Source: whois.arin.net
IP Address: 152.199.0.100
Name: UU-152-176
Handle: NET-152-176-0-0-1
Registration Date: 01/04/92
Range: 152.176.0.0-152.199.255.255
Org: ANS Communications, Inc
Org Handle: ANS
Address: 22001 Loudoun County Parkway
City: Ashburn
State/Province: VA
Postal Code: 20147
Country: United States

 

[Twiglets]

i am trying to determine who is this IP 168.95.245.1 and 152.199.0.100

I use https://www.ultratools.com/tools/ipWhoisLookup for looking this sort of thing up.
There are lots of other things that may be useful at https://www.ultratools.com

 

[Adamm]

I believe is maybe some kind of NTP issue also. I removed NTP merlin just enabled the local NTP server in 384.11 and bam its working now. Thank you sir I will reinstall NTP merlin when I get home from work and check skynet again later.

Yeah, I tried to make a stubby.yml.add file that caused ntpd sync to stop. Good you got it working for now and can thoroughly investigate later.

Skynet depends on NTP for accurate logging, so if you are having NTP issues Skynet will fail to function. After 5 minutes there is an error message, but it sounds like adding an earlier notification could help those who don't wait it out until then.

 

[Adamm]

I've pushed v6.8.5

Skynet will now alert users at the 60 second mark when waiting for NTP to sync, along with the existing error message at 5 minutes.