Skynet Skynet - Router Firewall & Security Enhancements

[2992]

Can you check if that's the case for you too?

I only have 1 partition, EXT2. Nothing else.

Then it seems it's related to a single or multiple corrupt files.
Since both Skynet and AB write frequently to USB devices, a sudden loss of power might cause corrupted files.
There's not much one can do about it but find and fix it.

That can indeed might be the case. Any idea how to check the USBdisk for errors and fix them (if possible)?
I have already secure-formatted the disk for couple of times, then I've made it back EXT2, and re-installed all the scripts. Tried a second USB. Still have issues with Skynet. I have no other idea what else to do..

 

[thelonelycoder]

I only have 1 partition, EXT2. Nothing else.


That can indeed might be the case. Any idea how to check the USBdisk for errors and fix them (if possible)?
I have already secure-formatted the disk for couple of times, then I've made it back EXT2, and re-installed all the scripts. Tried a second USB. Still have issues with Skynet. I have no other idea what else to do..

A repair function is built into the Web UI.
Click on device icon in the Network Map, then run the Health Scanner on the right pane.
With AB and Skynet running off of it, it might take a while to un-mount the device for the test to run.

 

[2992]

A repair function is built into the Web UI.
Click on device icon in the Network Map, then run the Health Scanner on the right pane.
With AB and Skynet running off of it, it might take a while to un-mount the device for the test to run.

just did, and it looks not very promising...
Also, no repairing function I could see there.

Errors have been detected on your hard drive. Remove any damaged files or use a PC to correct system issues.

 

[Adamm]

Same here. Ab-solution works fine in the same USB where Skynet is having issues. But one thing is, it seems my USB have a FAT16 partition somewhere. The fdisk shows,

admin@RT-AC68U-DF28:/tmp/home/root# fdisk -l /dev/sda

Disk /dev/sda: 2055 MB, 2055208960 bytes
242 heads, 63 sectors/track, 263 cylinders
Units = cylinders of 15246 * 512 = 7805952 bytes

   Device Boot      Start         End      Blocks  Id System
/dev/sda1               1         256     1945584   6 FAT16
Partition 1 has different physical/logical beginnings (non-Linux?):
     phys=(0, 0, 32) logical=(0, 0, 33)
Partition 1 has different physical/logical endings:
     phys=(768, 241, 63) logical=(255, 55, 5)

Can you check if that's the case for you too?

Sometimes USB devices have a hidden partition with bloatware from the manafacture. I usually repartition new devices with Minitool Partition Wizard on my windows machine to a fresh EXT4 setup.

Before you go through this trouble though, make sure its actually the USB device causing the issues by trying out a JFFS install. If everything works as expected on JFFS you can make a pretty solid bet that it is the USB causing the troubles.

 

[skeal]

Then it seems it's related to a single or multiple corrupt files.
Since both Skynet and AB write frequently to USB devices, a sudden loss of power might cause corrupted files.
There's not much one can do about it but find and fix it.

I recommended this in post #1270 above!

 

[thelonelycoder]

I recommended this in post #1270 above!

It helps to double-check

 

[2992]

So, I'm using now a third USBDrive. Formated as EXT2, 1 partition, clean.
I've installed ABS just fine, then when I try to install Skynet, I get this:

Skynet: [INFO] USB Not Found - Sleeping For 10 Seconds ( Attempt 1 Of 10 )

What am I doing wrong?

 

[Adamm]

So, I'm using now a third USBDrive. Formated as EXT2, 1 partition, clean.
I've installed ABS just fine, then when I try to install Skynet, I get this:

Skynet: [INFO] USB Not Found - Sleeping For 10 Seconds ( Attempt 1 Of 10 )

What am I doing wrong?

You have an old entry in firewall-start linking to the wrong drive name. Although the install command should bypass this check, but there is a typo.

Update to 5.5.2 to fix this (or remove the entry manually)... You will need to update via;

/usr/sbin/curl --retry 3 "https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/firewall.sh" -o "/jffs/scripts/firewall"

 

[2992]

You have an old entry in firewall-start linking to the wrong drive name. Although the install command should bypass this check, but there is a typo.

Update to 5.5.2 to fix this (or remove the entry manually)... You will need to update via;

/usr/sbin/curl --retry 3 "https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/firewall.sh" -o "/jffs/scripts/firewall"

Ran that, managed to install it (yey!), then I run Banmalware first time, and I've got this error:

Whitelisting Shared Domains     /opt/bin/firewall: line 2312: can't fork

Then ran Banmalware again, and it was ok:

Nov  9 13:16:54 rc_service: service 21021:notify_rc restart_firewall
Nov  9 13:16:54 start_nat_rules: apply the nat_rules(/tmp/nat_rules_vlan2_vlan2)!
Nov  9 13:16:55 custom_script: Running /jffs/scripts/firewall-start (args: vlan2)
Nov  9 13:16:55 Skynet: [INFO] Startup Initiated... ( banmalware autoupdate usb=/tmp/mnt/AbS )
Nov  9 13:16:56 Skynet: [INFO] Setting Up Skynet...
Nov  9 13:17:16 Skynet: [Complete] 0 IPs / 0 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [21s]
Nov  9 13:19:37 Skynet: [Complete] 165650 IPs / 3192 Ranges Banned. 165650 New IPs / 3192 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [63s]

Now, back under behaviour observation.

 

[skeal]

Ran that, managed to install it (yey!), then I run Banmalware first time, and I've got this error:

Whitelisting Shared Domains     /opt/bin/firewall: line 2312: can't fork

Then ran Banmalware again, and it was ok:

Nov  9 13:16:54 rc_service: service 21021:notify_rc restart_firewall
Nov  9 13:16:54 start_nat_rules: apply the nat_rules(/tmp/nat_rules_vlan2_vlan2)!
Nov  9 13:16:55 custom_script: Running /jffs/scripts/firewall-start (args: vlan2)
Nov  9 13:16:55 Skynet: [INFO] Startup Initiated... ( banmalware autoupdate usb=/tmp/mnt/AbS )
Nov  9 13:16:56 Skynet: [INFO] Setting Up Skynet...
Nov  9 13:17:16 Skynet: [Complete] 0 IPs / 0 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [21s]
Nov  9 13:19:37 Skynet: [Complete] 165650 IPs / 3192 Ranges Banned. 165650 New IPs / 3192 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [63s]

Now, back under behaviour observation.

IMHO ext2 used in this application is far inferior to ext4 file system.

 

[thelonelycoder]

IMHO ext2 used in this application is far inferior to ext4 file system.

I‘ve seen the exact opposite. A comprehensive test by, say @thiggins might offer more conclusive results.

 

[Butterfly Bones]

IMHO ext2 used in this application is far inferior to ext4 file system.

Many varying opinions on this topic.
I have had ongoing USB corruption with unplanned power off (renovation in my complex) needing to pull both USB sticks and run fsck on my linux box. This was causing issues with Skynet and AB-Solution on one USB and Nvram Backup / Restore on the other. I run linux on two laptops and understand the differences on the ext2/3/4 file systems.

I asked thelonelycoder about his ext2 recommendation on his AB-Solution webstite and got this reply.
https://www.snbforums.com/threads/a...ing-solution-v3-9-2.37511/page-81#post-353758

Based on those links I stayed with ext2 since I had more errors on the ext4 stick contrary to my "learning / knowledge".

edit - ninja'd

 

[skeal]

I‘ve seen the exact opposite. A comprehensive test by, say @thiggins might offer more conclusive results.

I'm just saying the ext4 file system deals with sudden shut downs a whole lot better than ext2 in my experience.

 

[Adamm]

Personally I use EXT4 because of the supposed benefits like journaling. But can't say I've looked too much into it.

 

[Butterfly Bones]

Personally I use EXT4 because of the supposed benefits like journaling. But can't say I've looked too much into it.

Amused by the fifth bullet under EXT2 in that link.

 

[.TT.]

@Adamm
Found a minor error in the stats for 382.

Top 50 Blocked Devices (Outbound);
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
370x 192.168.2.111 (No Name Found)
63x 192.168.2.114 (No Name Found)
58x 192.168.2.115 (No Name Found)

 

[thelonelycoder]

@Adamm
Found a minor error in the stats for 382.

Top 50 Blocked Devices (Outbound);
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
grep: /tmp/var/lib/misc/dnsmasq.leases: No such file or directory
370x 192.168.2.111 (No Name Found)
63x 192.168.2.114 (No Name Found)
58x 192.168.2.115 (No Name Found)

@Adamm As with the crontab file location, for 382.x or maybe just for the AC86U: Leave out the leading /tmp and it works for 380 and 382.
Might also be that the file is not yet created after a fresh boot.

 

[2992]

So, after trying 3 USBs, all formated again and checked for errors... it's still not working right. :|

Nov  9 20:48:16 Skynet: [INFO] Lock File Detected (start banmalware autoupdate usb=/tmp/mnt/aBs) (pid=690) - Exiting
Nov  9 20:48:16 openvpn[1139]: Initialization Sequence Completed
Nov  9 20:48:22 Skynet: [Complete] 161342 IPs / 2656 Ranges Banned. 161342 New IPs / 2656 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [22s]
Nov  9 21:00:01 Skynet: [Complete] 0 IPs / 0 Ranges Banned. -161342 New IPs / -2656 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [1s]

 

[thelonelycoder]

Personally I use EXT4 because of the supposed benefits like journaling. But can't say I've looked too much into it.

If only we have a definitive answer to that.
What's best to use is also what the device is: A flash drive or a HDD/SSD.
I refer to these two older threads, with RMerlin weighing in on the second link:
https://www.snbforums.com/threads/ext2-ext3-ext4-or-ntfs-for-usb-stick-disk.31621/
https://www.snbforums.com/threads/usb-file-system.15134/#post-102395

 

[Protik]

So, after trying 3 USBs, all formated again and checked for errors... it's still not working right. :|

Nov  9 20:48:16 Skynet: [INFO] Lock File Detected (start banmalware autoupdate usb=/tmp/mnt/aBs) (pid=690) - Exiting
Nov  9 20:48:16 openvpn[1139]: Initialization Sequence Completed
Nov  9 20:48:22 Skynet: [Complete] 161342 IPs / 2656 Ranges Banned. 161342 New IPs / 2656 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [22s]
Nov  9 21:00:01 Skynet: [Complete] 0 IPs / 0 Ranges Banned. -161342 New IPs / -2656 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [1s]

For me reformatting the USB resolved the issue.