andresmorago
Senior Member
hello @Adamm
i have done some checking and i believe this isnt happening to me. can you please advise?
im using ip 185.153.199.53 as blocking example. this is in skynet blacklist
10.0.0.7 is connected directly to router. when i ping or do tracert from this device, it indeed gets blocked by skynet
Code:
Apr 19 15:14:18 RT-AC3100-0548 kernel: [BLOCKED - OUTBOUND] IN=br0 OUT= MAC=xx:ed:fb:ac:05:48:xx:xx:xx:6f:63:xx:xx:xxSRC=10.0.0.7 DST=185.153.199.53 LEN=92 TOS=0x00 PREC=0x00 TTL=13 ID=25891 PROTO=ICMP TYPE=8 CODE=0 ID=2 SEQ=60136
Code:
/opt/bin/firewall stats search ip 10.0.0.7 10
[i] Logging Data Detected in /tmp/mnt/sda1/skynet/skynet.log - 8.7M
[i] Monitoring From Apr 16 03:00:05 To Apr 19 15:23:01
[i] 33467 Block Events Detected
[i] 3329 Unique IPs
[i] 9 Manual Bans Issued
10.0.0.7 is in set Skynet-Whitelist.
10.0.0.7 is NOT in set Skynet-Blacklist.
10.0.0.7 is NOT in set Skynet-BlockedRanges.
Whitelist Reason;
10.0.0.2 "PrivateIP"
10.0.0.7 "PrivateIP"
10.0.0.0/8 "nvram: lan_ipaddr"
10.0.0.66 "PrivateIP"
10.0.0.32 "PrivateIP"
10.0.0.6 "Shared-Whitelist: pagead2.googlesyndication.com"
[i] IP Location - Undefined (Undefined / Undefined)
[i] 10.0.0.7 First Tracked On Apr 16 03:03:02
[i] 10.0.0.7 Last Tracked On Apr 19 15:17:46
[i] 194 Blocks Total
Event Log Entries From 10.0.0.7;
First Block Tracked From 10.0.0.7;
Apr 16 03:03:02 RT-AC3100-0548 kernel: [BLOCKED - OUTBOUND] IN=br0 OUT= MAC=4c:ed:fb:ac:xx:xx:xx:23:24:xx:63:xx:xx:xx SRC=10.0.0.7 DST=180.87.4.143 LEN=52 TOS=0x00 PREC=0x00 TTL=128 ID=169
10 Most Recent Blocks From 10.0.0.7;
Apr 19 15:17:42 RT-AC3100-0548 kernel: [BLOCKED - OUTBOUND] IN=br0 OUT= MAC=4c:ed:fb:ac:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx SRC=10.0.0.7 DST=185.153.199.53 LEN=92 TOS=0x00 PREC=0x00 TTL=30 ID=25
Apr 19 15:17:46 RT-AC3100-0548 kernel: [BLOCKED - OUTBOUND] IN=br0 OUT= MAC=4c:ed:fb:ac:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx0 SRC=10.0.0.7 DST=185.153.199.53 LEN=92 TOS=0x00 PREC=0x00 TTL=30 ID=25
Top 10 Targeted Ports From 10.0.0.7 (Inbound);
-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------
-*-
Top 10 Sourced Ports From 10.0.0.7 (Inbound);
-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------
-*-
=============================================================================================================
[#] 188242 IPs (+0) -- 15244 Ranges Banned (+0) || 488 Inbound -- 90 Outbound Connections Blocked! [stats] [35s]10.0.1.2 is connected to the router via openvpn. routers openvpn server is 10.0.1.1 btw
in this case, running a tracert from my vpn client shows all hops and there is no sign of skynet blocking it. also, there is no output on log file
Code:
[$] /opt/bin/firewall stats search ip 10.0.1.2 10
=============================================================================================================
[i] Logging Data Detected in /tmp/mnt/sda1/skynet/skynet.log - 8.7M
[i] Monitoring From Apr 16 03:00:05 To Apr 19 15:21:01
[i] 33455 Block Events Detected
[i] 3327 Unique IPs
[i] 9 Manual Bans Issued
10.0.1.2 is in set Skynet-Whitelist.
10.0.1.2 is NOT in set Skynet-Blacklist.
10.0.1.2 is NOT in set Skynet-BlockedRanges.
Whitelist Reason;
*--
-*-
[i] IP Location - Undefined (Undefined / Undefined)
[i] 10.0.1.2 First Tracked On
[i] 10.0.1.2 Last Tracked On
[i] 0 Blocks Total
Event Log Entries From 10.0.1.2;
First Block Tracked From 10.0.1.2;
-*-
10 Most Recent Blocks From 10.0.1.2;
*--
Top 10 Targeted Ports From 10.0.1.2 (Inbound);
-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------
*--
Top 10 Sourced Ports From 10.0.1.2 (Inbound);
-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------
--*
*--
=============================================================================================================
[#] 188242 IPs (+0) -- 15244 Ranges Banned (+0) || 480 Inbound -- 90 Outbound Connections Blocked! [stats] [33s]
Last edited:
