Skynet Skynet - Router Firewall & Security Enhancements

[paulbates]

Donation? I found the donation point for AB-Solution, but I can’t find Adamm’s for Skynet. Is there one?

(Great set of questions, by the way.)

Thanks for the kind words, always nice to know people putting all this to good use. Skynet started out as a personal project for easy mass IP blocking and eventually evolved into what it is today, who knows what 2018 will bring.

Thank you Adam and Martin, that's what I needed to know. I guess I assumed there would be a donation link, if not, certainly let me know. Too much hard work has gone on here

Paul

 

[paulbates]

Skynet supports installation on the following partition types to be consistent with Entware and other scripts, although I haven't found any reason I could also add things like NTFS or why Entware doesn't support them in the first place. Let me know what partition you use and I'll definitely do some testing and consider it.

ext2|ext3|ext4|tfat|exfat

I'm a very minimalist CLI / linux user. A number of linux devices in the house, but I've only learned enough to "follow the bouncing ball", for instance your directions for setting up Skynet.

Here's what fdisk -l gave me

Disk /dev/mtdblock0: 0 MB, 524288 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Disk /dev/mtdblock0 doesn't contain a valid partition table

Disk /dev/mtdblock1: 1 MB, 1572864 bytes
255 heads, 63 sectors/track, 0 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Disk /dev/mtdblock1 doesn't contain a valid partition table

Disk /dev/mtdblock2: 65 MB, 65011712 bytes
255 heads, 63 sectors/track, 7 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Disk /dev/mtdblock2 doesn't contain a valid partition table

Disk /dev/mtdblock3: 63 MB, 63215104 bytes
255 heads, 63 sectors/track, 7 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Disk /dev/mtdblock3 doesn't contain a valid partition table

Disk /dev/mtdblock4: 67 MB, 67108864 bytes
255 heads, 63 sectors/track, 8 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

Disk /dev/mtdblock4 doesn't contain a valid partition table
Found valid GPT with protective MBR; using GPT

Disk /dev/sda: 976773168 sectors, 465G
Logical sector size: 512
Disk identifier (GUID): c16d7067-6249-480e-8745-6e5c72663d50
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 976773134

Number Start (sector) End (sector) Size Code Name
1 34 262177 128M 0700 Microsoft reserved partition
2 264192 976771071 465G 0700 Basic data partition
​

Paul

 

[Adamm]

Donation? I found the donation point for AB-Solution, but I can’t find Adamm’s for Skynet. Is there one?

(Great set of questions, by the way.)

Thank you Adam and Martin, that's what I needed to know. I guess I assumed there would be a donation link, if not, certainly let me know. Too much hard work has gone on here

Paul

Truth be told I never had one until around a month ago when another user insisted. It's not something I push in peoples faces so I hid it to the very bottom of the GitHub page

 

[Adamm]

Here's what fdisk -l gave me

The command "mount" should give me all the necessary info. I assume its NTFS but doesn't hurt to confirm.

 

[thelonelycoder]

I guess I assumed there would be a donation link, if not, certainly let me know. Too much hard work has gone on here

Donation? I found the donation point for AB-Solution, but I can’t find Adamm’s for Skynet. Is there one?

Scroll down:
https://github.com/Adamm00/IPSet_ASUS

 

[paulbates]

Hi, thank you

The command "mount" should give me all the necessary info. I assume its NTFS but doesn't hurt to confirm.

Yes, NTFS

Here is the mount output

rootfs on / type rootfs (rw)
/dev/root on / type squashfs (ro,relatime)
devtmpfs on /dev type devtmpfs (rw,relatime,size=257508k,nr_inodes=64377,mode=755)
proc on /proc type proc (rw,relatime)
tmpfs on /tmp type tmpfs (rw,relatime)
sysfs on /sys type sysfs (rw,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
/dev/mtdblock4 on /jffs type jffs2 (rw,noatime)
usbfs on /proc/bus/usb type usbfs (rw,relatime)
/dev/root on /usr/sbin/tc type squashfs (ro,relatime)
/dev/sda2 on /tmp/mnt/Watsonia_Files type tntfs (rw,nodev,relatime,uid=0,gid=0,umask=00,nls=utf8,min_prealloc
_size=64k,max_prealloc_size=256M,readahead=1M,user_xattr,case_sensitive,fail_safe,hidden=show,dotfile=show,er
rors=continue,mft_zone_multiplier=1)
​

Paul

 

[martinr]

Scroll down:
https://github.com/Adamm00/IPSet_ASUS

Thank you
@thelonelycoder

Guess what? On my iPhone SE, which I use most of the time for Internet browsing, I see a very limited display; I only realised how limited, when I scrolled to the bottom and saw “Desktop Version”. When clicked on, a great deal more gets displayed, including Donate.

No wonder I couldn’t find it. Many thanks.


There must be others, similarly unaware of the facility to donate. I know you, Adamm and Merlin are not doing this for money, and I’m sure a lot of arm twisting had to be done to get you all to add a Donate button. Perhaps you and Adamm could insert something into the very first posts in your AB-Solution and Skynet threads to help people looking for a way to say “thanks” in a more tangible way? I realise you won’t want to make it look as if you are encouraging donations, but without your prompt, I probably would never have come across that part of the web page.

 

[DonnyJohnny]

Hi Adamm,
Are you able to allow us to customise the Malware update timing.
Currently I am using crontab -e to change it but everything the router or firewall restart, it will revert back to default.

Reason of customise is some of the filter I have is more dynamic and update more frequent. Therefore like to have Skynet update them more often like 6hr instead of 24hr.

Thank you.

 

[thelonelycoder]

Thank you
@thelonelycoder

Guess what? On my iPhone SE, which I use most of the time for Internet browsing, I see a very limited display; I only realised how limited, when I scrolled to the bottom and saw “Desktop Version”. When clicked on, a great deal more gets displayed, including Donate.

No wonder I couldn’t find it. Many thanks.


There must be others, similarly unaware of the facility to donate. I know you, Adamm and Merlin are not doing this for money, and I’m sure a lot of arm twisting had to be done to get you all to add a Donate button. Perhaps you and Adamm could insert something into the very first posts in your AB-Solution and Skynet threads to help people looking for a way to say “thanks” in a more tangible way? I realise you won’t want to make it look as if you are encouraging donations, but without your prompt, I probably would never have come across that part of the web page.

You guessed correctly, I am reluctant to add a donation link for the reasons you mentioned.
But for the purpose to satisfy the demand and desire of those wanting to donate, I added the link to post #1 in the AB-Solution thread.

 

[thelonelycoder]

Thank you
@thelonelycoder

Guess what? On my iPhone SE, which I use most of the time for Internet browsing, I see a very limited display; I only realised how limited, when I scrolled to the bottom and saw “Desktop Version”. When clicked on, a great deal more gets displayed, including Donate.

No wonder I couldn’t find it. Many thanks.


There must be others, similarly unaware of the facility to donate. I know you, Adamm and Merlin are not doing this for money, and I’m sure a lot of arm twisting had to be done to get you all to add a Donate button. Perhaps you and Adamm could insert something into the very first posts in your AB-Solution and Skynet threads to help people looking for a way to say “thanks” in a more tangible way? I realise you won’t want to make it look as if you are encouraging donations, but without your prompt, I probably would never have come across that part of the web page.

Argh, adding a word expressing a certain popular payment option locked the AB-Solution thread, awaiting admin approval.
Ah well, I changed that wording and we'll see if it gets approved.
Until then, no AB-Solution thread on this forum

 

[pietjepuk100]

Argh, adding a word expressing a certain popular payment option locked the AB-Solution thread, awaiting admin approval.
Ah well, I changed that wording and we'll see if it gets approved.
Until then, no AB-Solution thread on this forum

Aha, that's why. Thanks for letting us know. Happy New Year ...

 

[thelonelycoder]

Aha, that's why. Thanks for letting us know. Happy New Year ...

All good now, @RMerlin unlocked it

 

[Adamm]

Hi Adamm,
Are you able to allow us to customise the Malware update timing.
Currently I am using crontab -e to change it but everything the router or firewall restart, it will revert back to default.

Reason of customise is some of the filter I have is more dynamic and update more frequent. Therefore like to have Skynet update them more often like 6hr instead of 24hr.

Thank you.

Easiest way would to be adding this at the end of your firewall-start file.

cru d Skynet_banmalware
cru a Skynet_banmalware "0 */6 * * * sh /jffs/scripts/firewall banmalware"

 

[DonnyJohnny]

Easiest way would to be adding this at the end of your firewall-start file.

cru d Skynet_banmalware
cru a Skynet_banmalware "0 */6 * * * sh /jffs/scripts/firewall banmalware"

Noob with command and I know I need these command at the restart/reboot. That is what I am looking for.. lol.. thanks.

 

[martinr]

Argh, adding a word expressing a certain popular payment option locked the AB-Solution thread, awaiting admin approval.
Ah well, I changed that wording and we'll see if it gets approved.
Until then, no AB-Solution thread on this forum

Sorry about that; I request absolution for my sins.

 

[snixel]

Hi all,

A couple of days ago I searched for a false positive and 'temporary disabled' skynet to rule it out. I figured out the real cause and now want to turn it back on, but can't seem to find out how to do that. I've read the readme on github, but there doesn't seem to be a 'enable' command.
At first I thought it would re-enabled itself after a while, but that doesn't seem to be the case either.
I tried restarting it, but that results in a 'files locked' message.
Do i need to reboot the router or something?

 

[thelonelycoder]

I request absolution for my sins.

As the giver, your request for AB-Solution is granted.

 

[DonnyJohnny]

Hi all,

A couple of days ago I searched for a false positive and 'temporary disabled' skynet to rule it out. I figured out the real cause and now want to turn it back on, but can't seem to find out how to do that. I've read the readme on github, but there doesn't seem to be a 'enable' command.
At first I thought it would re-enabled itself after a while, but that doesn't seem to be the case either.
I tried restarting it, but that results in a 'files locked' message.
Do i need to reboot the router or something?

it takes a while for the skynet to restart. The file lock will be gone in 2min.

 

[Adamm]

Hi all,

A couple of days ago I searched for a false positive and 'temporary disabled' skynet to rule it out. I figured out the real cause and now want to turn it back on, but can't seem to find out how to do that. I've read the readme on github, but there doesn't seem to be a 'enable' command.
At first I thought it would re-enabled itself after a while, but that doesn't seem to be the case either.
I tried restarting it, but that results in a 'files locked' message.
Do i need to reboot the router or something?

As @DonnyJohnny pointed out above, this lock message should disappear after 1-2 minutes. If it still hasn't disappeared for whatever reason, please give me the output of;

cat /tmp/skynet.lock

Also for clarification, your process of restarting Skynet was correct. The disable command will disable Skynet until manually restarted using the appropriate command or the next time the restart_firewall event is called (on reboot etc)

 

[elorimer]

Yikes! What seems to have been added overnight to the banned IPs:

nytimes.com
xo.com
netdocuments

1112 new IPs and 19 ranges added at 2:38 am.