Skynet Skynet - Router Firewall & Security Enhancements

[Adamm]

About how much RAM does Skynet use in an 86u?

Idle it uses close to nothing, a few MB at most. During heavy processes (banmalware), from memory it can spike to about 20MB for a few seconds.

Is this enough for Skynet, or will I just mess up the router?

Any amount of free ram is fine. Skynet will tap into SWAP if nessesary.

 

[Sebastien Bougie]

Hello,

I have a stupdid question, but i'm not able to find the answer. I need to open port 57226. I have last beta version of merlin installed, Skynet and Diversion. I did the port forwardion the router side but when i check if my port is open it always saying that its closed. I probably need to change something in sn. but i dont see this option. Can someone help?

Thanks

 

[Zastoff]

Hello,

I have a stupdid question, but i'm not able to find the answer. I need to open port 57226. I have last beta version of merlin installed, Skynet and Diversion. I did the port forwardion the router side but when i check if my port is open it always saying that its closed. I probably need to change something in sn. but i dont see this option. Can someone help?

Thanks

Maybe try disable secure mode in skynet and see if it works
(Just a guess)

 

[Sebastien Bougie]

Maybe try disable secure mode in skynet and see if it works
(Just a guess)

Good suggestion but its not working

 

[Adamm]

Hello,

I have a stupdid question, but i'm not able to find the answer. I need to open port 57226. I have last beta version of merlin installed, Skynet and Diversion. I did the port forwardion the router side but when i check if my port is open it always saying that its closed. I probably need to change something in sn. but i dont see this option. Can someone help?

Thanks

Skynet doesn't interfear with port forwarding.

 

[DonnyJohnny]

Nice latest update with the use of md5 hash to detect update.
Thanks. No need to do manual force update anymore. Lol.

 

[slobodan]

Nice latest update with the use of md5 hash to detect update.
Thanks. No need to do manual force update anymore. Lol.

Skynet is broken in the latest version.

 

[DonnyJohnny]

Skynet is broken in the latest version.

What is broken?
Mine is working.
6.3.3 (23/11/2018)

 

[Zastoff]

Skynet is broken in the latest version.

Skynet - Asus Firewall Addition
And restart skynet

 

[slobodan]

/jffs/scripts/firewall settings debugmode enable

[*] Skynet Not Running - Exiting

 

[slobodan]

Log is empty.

################################################
## Generated By Skynet - Do Not Manually Edit ##
## Nov 22 16:58:23                            ##

## Installer ##
model="RT-AC56U"
localver="v6.6.3"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate="true"
debugmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/Opttud/myswap.swp"
swappartition=""

## Counters / Lists ##
blacklist1count=""
blacklist2count=""
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="disabled"
fastswitch="disabled"

################################################

 

[slobodan]

Skynet - Asus Firewall Addition
And restart skynet

All those tricks did not help, it just spit an error about a missing chain.

No chain matching target or something like that.

iptables: No chain/target/match by that name.

 

[Zastoff]

All those tricks did not help, it just spit an error about a missing chain.

No chain matching target or something like that.

Did you run

/usr/sbin/curl --retry 3 "https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/firewall.sh" -o "/jffs/scripts/firewall" && chmod 755 /jffs/scripts/firewall

And then restarted skynet?

 

[slobodan]

Did you run

/usr/sbin/curl --retry 3 "https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/firewall.sh" -o "/jffs/scripts/firewall" && chmod 755 /jffs/scripts/firewall

And then restarted skynet?

Yes, I did, it's the very last version (6.6.3).

It said:

iptables: No chain/target/match by that name.

 

[Zastoff]

Tried to update -f (forced) to reinstall the update?
Or maybe reinstall skynet completely

 

[slobodan]

Yes, I have forced updated it, I have deleted it and reinstalled, it did not help. I got this:

+ Load_IPTables
+ [ all = all ]
+ iptables -t raw -I PREROUTING -i eth0 -m set ! --match-set Skynet-Whitelist src -m set --match-set Skynet-Master src -j DROP
+ [ all = all ]
+ iptables -t raw -I PREROUTING -i br0 -m set ! --match-set Skynet-Whitelist dst -m set --match-set Skynet-Master dst -j DROP
+ iptables -t raw -I OUTPUT -m set ! --match-set Skynet-Whitelist dst -m set --match-set Skynet-Master dst -j DROP
+ nvram get sshd_enable
+ [ 1 = 1 ]
+ nvram get sshd_bfp
+ [ 1 = 1 ]
+ iptables --line -nL SSHBFP
+ awk {print $1}
+ grep -E DROP|logdrop
+ grep -F seconds: 60 hit_count: 4
iptables: No chain/target/match by that name.

 

[slobodan]

nvram unset sshd_bfp
nvram commit

does the job.

 

[martinr]

Hello,

I have a stupdid question, but i'm not able to find the answer. I need to open port 57226. I have last beta version of merlin installed, Skynet and Diversion. I did the port forwardion the router side but when i check if my port is open it always saying that its closed. I probably need to change something in sn. but i dont see this option. Can someone help?

Thanks

How are you checking to see if the port is open? I’m assuming you have set the protocol to UDP; at least one if the open-port checking tools I have used only checks for ports open to the TCP protocol.

Could that be your problem?

 

[Adamm]

Nice latest update with the use of md5 hash to detect update.
Thanks. No need to do manual force update anymore. Lol.

One of the various new features I'm working on. This should help in situations where minor updates are pushed in the case of bug fixes etc.

Skynet is broken in the latest version.

Yes, I did, it's the very last version (6.6.3).

It said:

iptables: No chain/target/match by that name.

Thanks, thats a bug specific to Johns fork (he uses the same nvram values w/ different settings). I've pushed a fix accordingly.

 

[Adamm]

@MartinDEE @cutidudz Merlin has dropped v384.8 Beta 2 which has the fix for IPSet on the AX88U. If you get a chance to test Skynet out that would be great. Hopefully I will have a unit myself to test on within the next few weeks.