Menu
What's new
By:
Filters Better Search

Skynet Skynet - Router Firewall & Security Enhancements

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Adamm said:
I think I can reproduce this, if you are using the menu there's no need for quotes, I'll add an automated check to the function.
Click to expand...

Just tried without the quotes;

Input Country Abbreviations To Ban:


[Countries]: cn pk kp


[$] /jffs/scripts/firewall ban country cn pk kp


/jffs/scripts/firewall: /tmp/mnt/rstick/skynet/skynet.cfg: line 17: kp: not found

Banning Known IP Ranges For (cn pk kp)

Downloading Lists

Filtering IPv4 Ranges & Applying Blacklists

Saving Changes


[#] 162786 IPs (+0) -- 7308 Ranges Banned (+5419) || 0 Inbound -- 127 Outbound Connections Blocked! [ban] [12s]
 
^Tripper^ said:
Just tried without the quotes;

Input Country Abbreviations To Ban:


[Countries]: cn pk kp


[$] /jffs/scripts/firewall ban country cn pk kp


/jffs/scripts/firewall: /tmp/mnt/rstick/skynet/skynet.cfg: line 17: kp: not found

Banning Known IP Ranges For (cn pk kp)

Downloading Lists

Filtering IPv4 Ranges & Applying Blacklists

Saving Changes


[#] 162786 IPs (+0) -- 7308 Ranges Banned (+5419) || 0 Inbound -- 127 Outbound Connections Blocked! [ban] [12s]
Click to expand...

Its working now, the invalid input in your config file has been flushed and you shouldn't see it again. I also just pushed a hotfix to prevent users from inputting quotes
 
bitmonster said:
Been running a few days now, nothing in the logs (debug watch or stats command). Is this normal?
Click to expand...

Please post the output of;

sh /jffs/scripts/firewall debug info
 
@Adamm, its possible show some info on web browser when url/ip/domain is blocked by Skynet.
ex: " you are trying to access a url blocked by Skynet Firewall..."
 
blueshark said:
@Adamm, its possible show some info on web browser when url/ip/domain is blocked by Skynet.
ex: " you are trying to access a url blocked by Skynet Firewall..."
Click to expand...

Not in its current design without a third party webserver.
 
Even if you did implement a webserver message like that, the URL/domain referenced may have nothing to do with why the IP address was blocked (I often find shared hosting IP addresses are being blocked, likely having nothing to do with the vast majority of domains resolving to it). It may give people the mistaken impression the site they were trying to reach was specifically being blocked.
 
Hi guys,

Do you know how can I reset the manual ban list of IPs. I want to unban all manual IPs I previously banned and start over :)

Thanks in advance!
 
drg said:
Do you know how can I reset the manual ban list of IPs. I want to unban all manual IPs I previously banned and start over
Click to expand...

I think you can't, actually. You can unban all IP's to start over, but that will also unban all auto bans:

Code: 
sh /jffs/scripts/firewall unban nomanual

@Adamm, while looking for an answer to the question above, I noticed two minor things in the UI:

Code: 
What Type Of Input Would You Like To Unban:
[1]  --> IP
[2]  --> Range
[3]  --> Domain
[4]  --> Comment
[5]  --> Country
[6]  --> Malware
[7]  --> Non Manual Bans
[8]  --> All

[1-10]:

There's no option 9 or 10, so I guess that should say [1-8]: ?

Also, in the Deport List menu:

Code: 
Select Where To Deport List:
[1]  --> Blacklist
[2]  --> Whitelist
Shouldn't that say "Select Which List To Deport:"?

I haven't checked the other menu's, just stumbled across these two.
 
Adamm said:
Please post the output of;

sh /jffs/scripts/firewall debug info
Click to expand...

Code: 
#############################################################################################################
#                                _____ _                     _             __                               #
#                               / ____| |                   | |           / /                               #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_                               #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \                              #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |                             #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/                              #
#                                            __/ |                                                          #
#                                           |___/                                                           #
#                                                                                                           #
## - 24/09/2018 -                  Asus Firewall Addition By Adamm v6.4.7                                   #
##                                 https://github.com/Adamm00/IPSet_ASUS                                    #
#############################################################################################################


Router Model; RT-AC86U
Skynet Version; v6.4.7 (24/09/2018)
iptables v1.4.15 - (ppp0 @ 192.168.2.1)
ipset v6.32, protocol version: 6
FW Version; 384.6_0 (Jul 25 2018) (4.1.27)
Install Dir; /tmp/mnt/System/skynet (12.4G / 14.3G Space Available)
SWAP File; /tmp/mnt/System/myswap.swp (1.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/System/skynet
No Lock File Found

Checking Install Directory Write Permissions...     [Passed]
Checking Firewall-Start Entry...                    [Passed]
Checking Services-Stop Entry...                     [Passed]
Checking CronJobs...                                [Passed]
Checking IPSet Comment Support...                   [Passed]
Checking Log Level 5 Settings...                    [Failed]
Checking For Duplicate Rules In RAW...              [Passed]
Checking Inbound Filter Rules...                    [Passed]
Checking Inbound Debug Rules                        [Passed]
Checking Outbound Filter Rules...                   [Passed]
Checking Outbound Debug Rules                       [Passed]
Checking Whitelist IPSet...                         [Passed]
Checking BlockedRanges IPSet...                     [Passed]
Checking Blacklist IPSet...                         [Passed]
Checking Skynet IPSet...                            [Passed]
Checking For Diversion Plus Content...              [Passed]

Checking Autoupdate Setting...                      [Enabled]
Checking Auto-Banmalware Update Setting...          [Enabled]
Checking Debug Mode Setting...                      [Enabled]
Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]

[#] 162544 IPs (+0) -- 1872 Ranges Banned (+0) || 135 Inbound -- 0 Outbound Connections Blocked! [debug] [1s]
 
drg said:
Hi guys,

Do you know how can I reset the manual ban list of IPs. I want to unban all manual IPs I previously banned and start over :)

Thanks in advance!
Click to expand...

You can just unban everything if you want to remove your manual entries (then go ahead and re-generate banmalware etc). Or you can unban via the comment "Manual".

M@rco said:
I haven't checked the other menu's, just stumbled across these two.
Click to expand...

Thanks, fixed both typos.

bitmonster said:
Code: 
#############################################################################################################
#                                _____ _                     _             __                               #
#                               / ____| |                   | |           / /                               #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_                               #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \                              #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |                             #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/                              #
#                                            __/ |                                                          #
#                                           |___/                                                           #
#                                                                                                           #
## - 24/09/2018 -                  Asus Firewall Addition By Adamm v6.4.7                                   #
##                                 https://github.com/Adamm00/IPSet_ASUS                                    #
#############################################################################################################


Router Model; RT-AC86U
Skynet Version; v6.4.7 (24/09/2018)
iptables v1.4.15 - (ppp0 @ 192.168.2.1)
ipset v6.32, protocol version: 6
FW Version; 384.6_0 (Jul 25 2018) (4.1.27)
Install Dir; /tmp/mnt/System/skynet (12.4G / 14.3G Space Available)
SWAP File; /tmp/mnt/System/myswap.swp (1.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/System/skynet
No Lock File Found

Checking Install Directory Write Permissions...     [Passed]
Checking Firewall-Start Entry...                    [Passed]
Checking Services-Stop Entry...                     [Passed]
Checking CronJobs...                                [Passed]
Checking IPSet Comment Support...                   [Passed]
Checking Log Level 5 Settings...                    [Failed]
Checking For Duplicate Rules In RAW...              [Passed]
Checking Inbound Filter Rules...                    [Passed]
Checking Inbound Debug Rules                        [Passed]
Checking Outbound Filter Rules...                   [Passed]
Checking Outbound Debug Rules                       [Passed]
Checking Whitelist IPSet...                         [Passed]
Checking BlockedRanges IPSet...                     [Passed]
Checking Blacklist IPSet...                         [Passed]
Checking Skynet IPSet...                            [Passed]
Checking For Diversion Plus Content...              [Passed]

Checking Autoupdate Setting...                      [Enabled]
Checking Auto-Banmalware Update Setting...          [Enabled]
Checking Debug Mode Setting...                      [Enabled]
Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]

[#] 162544 IPs (+0) -- 1872 Ranges Banned (+0) || 135 Inbound -- 0 Outbound Connections Blocked! [debug] [1s]
Click to expand...

Your issue is caused by non-standard log level settings in your WebUI which is suppressing entries. On the syslog page correct the following settings.

gCpw4bM.png
 
I've pushed v6.4.8

Fixed a bug that could lead to extended stats not properly showing depending on the date, along with further preventing invalid user input within the menu.
 
Adamm said:
I've pushed v6.4.8
Click to expand...
Thanks! Silly question - how do we update it?

Also - I have set my log settings to Info / Debug as suggested and I am not being flooded with blocked entries in the system log however I notice this from time to time. Is this just the regular update or something...

And is it worth blocking certain countries known to be dodgy or does it make little difference these days while potentially just breaking stuff.

Oct 4 02:00:03 Skynet: [#] 162546 IPs (+0) -- 1872 Ranges Banned (+0) || 648 Inbound -- 0 Outbound Connections Blocked! [save] [3s]
Oct 4 02:25:21 Skynet: [#] 158896 IPs (-3650) -- 1934 Ranges Banned (+62) || 701 Inbound -- 0 Outbound Connections Blocked! [banmalware] [21s]
Oct 4 03:00:03 Skynet: [#] 158896 IPs (+0) -- 1934 Ranges Banned (+0) || 772 Inbound -- 0 Outbound Connections Blocked! [save] [3s]
 
bitmonster said:
Thanks! Silly question - how do we update it?

Also - I have set my log settings to Info / Debug as suggested and I am not being flooded with blocked entries in the system log however I notice this from time to time. Is this just the regular update or something...

And is it worth blocking certain countries known to be dodgy or does it make little difference these days while potentially just breaking stuff.

Oct 4 02:00:03 Skynet: [#] 162546 IPs (+0) -- 1872 Ranges Banned (+0) || 648 Inbound -- 0 Outbound Connections Blocked! [save] [3s]
Oct 4 02:25:21 Skynet: [#] 158896 IPs (-3650) -- 1934 Ranges Banned (+62) || 701 Inbound -- 0 Outbound Connections Blocked! [banmalware] [21s]
Oct 4 03:00:03 Skynet: [#] 158896 IPs (+0) -- 1934 Ranges Banned (+0) || 772 Inbound -- 0 Outbound Connections Blocked! [save] [3s]
Click to expand...
Option 10 in the menu to update...
 
@Adamm - I know you just pushed an update; food for thought / next update... To preclude this country ban confusion, what if you had a menu item like:

Code: 
2. What Type Of Input Would You Like To Ban:
[1]  --> IP
[2]  --> Range
[3]  --> Domain
[4]  --> Country

Code: 
Countries currently banned: none
[1] --> Add country
[2] --> Back
1.
Code: 
Enter country digraph to ban:
1 ---> cn

Code: 
Countries currently banned: cn
[1] --> Add country
[2] --> Back
1 ---> ru

Code: 
Countries currently banned: cn, ru
[1] --> Add country
[2] --> Back
etc...?

Just an idea. :)
 
bitmonster said:
Code: 
####
Click to expand...
JaimeZX said:
@Adamm - I know you just pushed an update; food for thought / next update... To preclude this country ban confusion, what if you had a menu item like:

Code: 
2. What Type Of Input Would You Like To Ban:
[1]  --> IP
[2]  --> Range
[3]  --> Domain
[4]  --> Country

Code: 
Countries currently banned: none
[1] --> Add country
[2] --> Back
1.
Code: 
Enter country digraph to ban:
1 ---> cn

Code: 
Countries currently banned: cn
[1] --> Add country
[2] --> Back
1 ---> ru

Code: 
Countries currently banned: cn, ru
[1] --> Add country
[2] --> Back
etc...?

Just an idea. :)
Click to expand...
Better idea! Create a string of countries you want blocked separated by spaces and using no other punctuation such as quotes. Copy and paste the whole thing into country block....boom done! One easy step.:rolleyes:
 
Has anyone noticed any ill effects from banning countries such as Russia, China, Nigeria etc.

Sent from my SM-G965F using Tapatalk
 
skeal said:
Better idea! Create a string of countries you want blocked separated by spaces and using no other punctuation such as quotes. Copy and paste the whole thing into country block....boom done! One easy step.:rolleyes:
Click to expand...
Well that works fine for me, I'm just saying it'd preclude questions if you came up with a way to avoid syntax confusion. :)
 
You must log in or register to reply here.

Similar threads

W
Looking for an add-on that does...
Replies
5
Views
2K
JGrana
JGrana
Viktor Jaep
Skynet Filter Validator v0.7 - Skynet Firewall Filter List IPv4 Integrity Validator
3 4 5
Replies
83
Views
13K
SomeWhereOverTheRainBow
SomeWhereOverTheRainBow
Viktor Jaep
TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (Now available in AMTM!)
Replies
2
Views
242
Viktor Jaep
Viktor Jaep
RMerlin
Fun with ChatGPT...
2
Replies
33
Views
2K
RMerlin
RMerlin
M
Firewall doesen't block custom rules, neighter Skynet
Replies
0
Views
1K
MamaLing
M
Similar threads
Thread starter Title Forum Replies Date
Klonoa Skynet Skynet causes router to crash and reboot Asuswrt-Merlin AddOns 1
S Skynet Skynet showing router itself making calls to China? Asuswrt-Merlin AddOns 26
J Skynet Skynet - Blocked outbounds coming from the router itself? Asuswrt-Merlin AddOns 12
O Skynet Installing Skynet causes router to crash and reboot Asuswrt-Merlin AddOns 26
L Skynet I have installed the skynet firewall how do I configure it if the security of iot devices is important? Asuswrt-Merlin AddOns 2
Davidncali001 Skynet Message on SKYNET I havent seen before Asuswrt-Merlin AddOns 1
S Skynet firewall reduces wireless range Asuswrt-Merlin AddOns 14
P Skynet Internet speed lower with Skynet on Asuswrt-Merlin AddOns 9
N Skynet SkyNet/Firewall blocking all ping requests, including outbound Asuswrt-Merlin AddOns 6
W Skynet SOLVED: Scrollbar Disappears on Skynet Tab on Asuswrt-Merlin 386.14 Asuswrt-Merlin AddOns 10

Similar threads

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!

Members online

Total: 876 (members: 17, guests: 859)
Top