1.) Will you be enhancing the menuing in the future to make things a little more user friendly? (kinda like the magic that AB-Solution uses?)
I'm always open to suggestions
2.) Is there a way to figure out which countries I have added to the country ban list?
In the upcoming version (5.1) every ban will make use of the comment feature. So all country bans will be entered with the comment "Country: xx". I'll use this data to do just that in one way or another.
3.) Is there a way to just remove one country without removing them all, and having to re-add them?
No and this is somewhat done on purpose, every time the banmalware and ban country commands are used, Skynet will delete any old entries added by these commands. The reason for this is because these lists are dynamic and change every so often (in the case of banmalware its compiled from 29 unique lists with some getting updated every 30 minutes).
I may look into changing functionality on the ban country command to "remember" your previous entries, but no promises!
4.) Is there an easy way to find out if all lists are up-to-date? Or if I enabled the banmalware option in the past, to make sure it's still active?
Easy way? Not really. Technically its possible, every entry in
filter.list has the time it was last updated in the header under "Source File Date". But there's almost guaranteed to be some sort of change in one of these lists every hour or so, so the functionality is not really worthwhile.
5.) When autobans are issued, what causes an autoban, and are they saved in a table so that they survive a reboot?
Anything with an INVALID packet state picked up by the routers built in SPI firewall (that isn't on HTTP(s) or mail ports), or anything that tries to brute force the SSH port.
While I would not go as far as requesting
@Viktor Jaep's #1 suggestion for Skynet, I have one gripe with the current interactive menu: there's a 'disable' switch but the 'enable' is blaringly missing. It would make sense to add it.
There is an undocumented "start" command (which can be easily broken down by looking at the install function for anyone who loves to tinker), but I was running into the issue that users would run this manually causing Skynet to start up with incorrect boot args (not pointing to USB location etc) so I removed it to try prevent that from happening.
There is still the "debug restart" command which I recommend using after using disable.
I had a couple of questions about current functionality, future development or features?
