Skynet Skynet - Router Firewall & Security Enhancements

[Protik]

That's safe unless you visit the one or two malicious subdomains that cause wordpress blogs to be banned.

That's going to be hard to figure out. It seems in that case my antivirus is going to be the last line of defense.

Sent from my SGH-M919 using Tapatalk

 

[Adamm]

It seems Skynet is blocking wordpress blogs like this one. I checked and AlienVault says it was previously malicious. Now I can whitelist it to go through, but will that be safe?

One of the downsides of free shared hosting is false flagging on lists like these. Because wordpress host tens of thousands of domains on the same servers, the few bad eggs get the IPs blacklisted. With that being said its safe to whitelist.

 

[thelonelycoder]

With all the recent USB file and disk errors, I felt a FAQ entry on the AB-Solution website is in order.
How to fix disk / USB key errors

 

[Viktor Jaep]

@Adamm I just updated from 380.68_4 to the official 382.1 I did not do anything other than update my scripts before updating the router. Everything went great. No problems and no errors. All scripts running without reinstall. You are awesome!

Question about this for Skeal or Adamm... What is the preferred method of handling Skynet when upgrading from 380.68_4 to 382.1? I see that Skeal just upgraded overtop of it, without problems. I was thinking of uninstalling since it's mounting to my USB drive, and wanted to make sure I have all devices unplugged before doing the update? Please let me know what is the preferred way to do this?

Thanks!

 

[skeal]

Question about this for Skeal or Adamm... What is the preferred method of handling Skynet when upgrading from 380.68_4 to 382.1? I see that Skeal just upgraded overtop of it, without problems. I was thinking of uninstalling since it's mounting to my USB drive, and wanted to make sure I have all devices unplugged before doing the update? Please let me know what is the preferred way to do this?

Thanks!

I had to reset to factory defaults because of a memory use problem. I have absolutely no problems except the QOS error that doesn't seem to harm anything. I would update scripts and flash then see from there whether you need a factory reset to correct weirdness.

 

[Butterfly Bones]

Question about this for Skeal or Adamm... What is the preferred method of handling Skynet when upgrading from 380.68_4 to 382.1? I see that Skeal just upgraded overtop of it, without problems. I was thinking of uninstalling since it's mounting to my USB drive, and wanted to make sure I have all devices unplugged before doing the update? Please let me know what is the preferred way to do this?

Thanks!

Here is a post by the lonely coder that I use as a guide.
https://www.snbforums.com/threads/r...380-68-is-available.40761/page-26#post-351025

Also see this link, just in case.
https://www.snbforums.com/threads/a...ing-solution-v3-9-2.37511/page-92#post-358070

 

[skeal]

@Adamm I have a quick question for you. Is there any way to remove a specific log entry that repeats itself by using a script? ASUS has a problem they need to fix but until then the log gets bigger and bigger. Any suggestions? The error is this one:

Nov 14 08:48:40 kernel: ERR[set_app_info_qos_meta:3361] It's a paid app, please assign a default bandwidth!

 

[Adamm]

Question about this for Skeal or Adamm... What is the preferred method of handling Skynet when upgrading from 380.68_4 to 382.1? I see that Skeal just upgraded overtop of it, without problems. I was thinking of uninstalling since it's mounting to my USB drive, and wanted to make sure I have all devices unplugged before doing the update? Please let me know what is the preferred way to do this?

Thanks!

Skynet is pretty hard to break, you can just update as per normal and it should work.

@Adamm I have a quick question for you. Is there any way to remove a specific log entry that repeats itself by using a script? ASUS has a problem they need to fix but until then the log gets bigger and bigger. Any suggestions? The error is this one:

You could just add a cronjob to-do it, for example here's how you would remove it once per hour.

cru a Clean_Logs "0 * * * * sed -i '/It's a paid app/d' /tmp/syslog.log"

 

[Viktor Jaep]

I had to reset to factory defaults because of a memory use problem. I have absolutely no problems except the QOS error that doesn't seem to harm anything. I would update scripts and flash then see from there whether you need a factory reset to correct weirdness.

Thanks for the vote of confidence... I think I'll save the upgrade for the weekend when I'm near it, instead of doing it from remote.

 

[skeal]

Thanks for the vote of confidence... I think I'll save the upgrade for the weekend when I'm near it, instead of doing it from remote.

Good idea man!

 

[wyldstallyn]

Hey @Adamm

Just noticed I'm getting an iptable failure notice, please see below. I haven't made any changes to the router in weeks and it was working fine after i logged in Saturday to manually update skynet.

Router Model; RT-AC68U
Skynet Version; v5.5.3 (11/11/2017)
iptables v1.4.14 - (eth0 @ 192.168.39.1)
ipset v6.32, protocol version: 6
FW Version; 380.68_4 (Oct 4 2017) (2.6.36.4brcmarm)
Install Dir; /tmp/mnt/skynet/skynet (13.9G / 14.7G Space Available)
Boot Args; /jffs/scripts/firewall start debug banmalware autoupdate usb=/tmp/mnt/skynet

Checking Skynet IPTable...                [Failed]

 

[Adamm]

Hey @Adamm

Just noticed I'm getting an iptable failure notice, please see below. I haven't made any changes to the router in weeks and it was working fine after i logged in Saturday to manually update skynet.

Router Model; RT-AC68U
Skynet Version; v5.5.3 (11/11/2017)
iptables v1.4.14 - (eth0 @ 192.168.39.1)
ipset v6.32, protocol version: 6
FW Version; 380.68_4 (Oct 4 2017) (2.6.36.4brcmarm)
Install Dir; /tmp/mnt/skynet/skynet (13.9G / 14.7G Space Available)
Boot Args; /jffs/scripts/firewall start debug banmalware autoupdate usb=/tmp/mnt/skynet

Checking Skynet IPTable...                [Failed]

Can you run;

sh /jffs/scripts/firewall restart

Then wait 60s and run;

sh /jffs/scripts/firewall debug info

 

[wyldstallyn]

Can you run;

sh /jffs/scripts/firewall restart

Then wait 60s and run;

sh /jffs/scripts/firewall debug info

Weird, seems to be working now ¯\_(ツ)_/¯

Router Model; RT-AC68U
Skynet Version; v5.5.3 (11/11/2017)
iptables v1.4.14 - (eth0 @ 192.168.39.1)
ipset v6.32, protocol version: 6
FW Version; 380.68_4 (Oct 4 2017) (2.6.36.4brcmarm)
Install Dir; /tmp/mnt/skynet/skynet (13.9G / 14.7G Space Available)
Boot Args; /jffs/scripts/firewall start debug banmalware autoupdate usb=/tmp/mnt/skynet
No Lock File Found

Checking Install Directory Write Permissions...        [Passed]
Checking Firewall-Start Entry...            [Passed]
Checking OpenVPN-Event Entry...                [Passed]
Checking CronJobs...                    [Passed]
Checking IPSet Comment Support...            [Passed]
Checking Log Level 7 Settings...            [Passed]
Checking Autobanning Status...                [Passed]
Checking Debug Mode Status...                [Passed]
Checking For Duplicate Rules In RAW...            [Passed]
Checking For Duplicate Rules In Filter...        [Passed]
Checking Skynet IPTable...                [Passed]
Checking Whitelist IPSet...                [Passed]
Checking BlockedRanges IPSet...                [Passed]
Checking Blacklist IPSet...                [Passed]
Checking Skynet IPSet...                [Passed]

Skynet: [Complete] 134063 IPs / 2036 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 3 Inbound / 0 Outbound Connections Blocked! [3s]

 

[Adamm]

Weird, seems to be working now

¯\_(ツ)_/¯

 

[thelonelycoder]

Has the swap file problem suddenly disappeared overnight or is it just a problem with the 86U router, where it's required for Skynet?
I'm asking because I'd like to know if I should integrate the same creation/management as @Adamm has coded into AB-Solution.
I'm not really keen on doing that if it's not necessary.

 

[skeal]

Has the swap file problem suddenly disappeared overnight or is it just a problem with the 86U router, where it's required for Skynet?
I'm asking because I'd like to know if I should integrate the same creation/management as @Adamm has coded into AB-Solution.
I'm not really keen on doing that if it's not necessary.

I have AC3100 absolutely no memory problem.

 

[thelonelycoder]

I have AC3100 absolutely no memory problem.

Same here, all my four routers cope/manage without a swap file.
I have a swap file on the primary and my development router, but they are seldom used and I created them for other reasons.

 

[Adamm]

Has the swap file problem suddenly disappeared overnight or is it just a problem with the 86U router, where it's required for Skynet?
I'm asking because I'd like to know if I should integrate the same creation/management as @Adamm has coded into AB-Solution.
I'm not really keen on doing that if it's not necessary.

Hard to give a definitive answer as I am just going off pure feedback. It's definitely a 86U specific issue, I've seen some pictures where models only have 20mb free ram which is concerning.

With that being said I'm not positive the swap file has had any effect, I disabled parallel operations on this model only to try avoid forking errors so it kind of skewed the results. Hopefully in the near future will have a 86U in my hands to test with.

 

[MacG32]

Does anyone know what format IP addresses have to be in to be imported in to the firewall? I have a standard text list of IP addresses with 1 on each line. I've tried it on pastebin.com and then on a file uploading site. Neither would upload in to the firewall.

 

[Butterfly Bones]

I found AB-Solution and Entware after installing Asuswrt-Merlin and reading his wiki, This link. https://github.com/RMerl/asuswrt-merlin/wiki/How-to-use-Adblock-using-Pixelserv and this section.

Pixelserv Installation (auto-install)

Entware install recommends and gives the option to install swap. When Adamm introduced swap and the ability to remove an existing installation and reinstall via Skynet, I just tried it and it worked fine. Maybe a test to see if there is a swap file already and then proceed, with the option to install if one not found, if you feel like it?

It might be good overall with the issues seen here preciously. I like it as a safety, since my AC-68U finds the swap on boot, though it has never been used as far as I can tell.

Nov 14 15:51:28 kernel: Adding 523248k swap on /tmp/mnt/CruzerExt2/skynet/myswap.swp.  Priority:-1 extents:533 across:553940k