Undesirable
Occasional Visitor
Oh, I thought you had to type in the full range of country abbriviations to be banned every time.
Skynet Skynet - Router Firewall & Security Enhancements
Zonkd
Very Senior Member
I’ve never used Putty before so I’m not sure. I have no issue with using my default Terminal app in MacOS.
Zonkd
Very Senior Member
You do have to copy in the full list of countries you want banned every time because it will remove all bans before applying your new changes.
L&LD
Part of the Furniture
Did you flush the cache of the browser you were using? Did you try rebooting the router and the device before seeing if it was actually blocked?
Twiglets
Senior Member
I suspect a configuration issue with putty ???
Else use 'Xshell 6' which is free for Home/School use and works perfectly. [www.netsarang.com].
(As used by 'thelonelycoder' .... See https://diversion.ch/diversion/use/development-tools.html)
I am able to copy the full list and paste it into the input with no problems !!!
It's an UbiSoft game.haha I thought the same thing. 34 countries banned here yet suprisingly it hasn't broken my net, nor gaming. If you want a laugh ban these countries and load up Watchdogs 2 on PS4 and see how many outbound blocks you get to all the shadiest countries. Guessing their online play operates p2p and it's hitting the ip addresses of other players as opposed to only the ip of a central server.
Code:af br cd cu ee eg et il iq ir kp kw ky kz lb md ng pk ps qa ru sa sb sd so ss sy tr ua ug vn ye zw cn
Voice chat is P2P. Same with Both Division games and For Honor. Pissed a lot of streamers off because one could possibly find out their ISP IP and DDoS them.
Adamm
Part of the Furniture
Definitely sounds like a terminal issue, I also use Xshell fine and have no limited amount of character input.
Thats because cloudflare is whitelisted by default as its a CDN provider.
Code:
skynet@RT-AX88U-DC28:/tmp/home/root# nslookup rn-tv.com
Server: 127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain
Name: rn-tv.com
Address 1: 104.28.2.47
Address 2: 104.28.3.47
Address 3: 2606:4700:30::681c:32f
Address 4: 2606:4700:30::681c:22f
skynet@RT-AX88U-DC28:/tmp/home/root# firewall stats search ip 104.28.2.47
#############################################################################################################
# _____ _ _ __ #
# / ____| | | | / / #
# | (___ | | ___ _ _ __ ___| |_ __ __/ /_ #
# \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \ #
# ____) | <| |_| | | | | __/ |_ \ V /| (_) | #
# |_____/|_|\_\\__, |_| |_|\___|\__| \_/ \___/ #
# __/ | #
# |___/ #
# #
## - 17/03/2019 - Asus Firewall Addition By Adamm v6.8.2 #
## https://github.com/Adamm00/IPSet_ASUS #
#############################################################################################################
=============================================================================================================
[i] Debug Data Detected in /tmp/mnt/USB/skynet/skynet.log - 996.0K
[i] Monitoring From Mar 16 18:58:56 To Mar 17 13:31:55
[i] 4268 Block Events Detected
[i] 652 Unique IPs
[i] 1 Manual Bans Issued
104.28.2.47 is in set Skynet-Whitelist.
104.28.2.47 is NOT in set Skynet-Blacklist.
104.28.2.47 is NOT in set Skynet-BlockedRanges.
Whitelist Reason;
*--
Associated Domain(s);
rn-tv.com
[i] IP Location - Canada (Cloudflare, Inc. / AS13335)Is there any way to remove the formatting from the stats output?
I am running commands to the router using plink and dumping them to a txt file for easier checking of things.
Thing is it chokes on color formatting.
I am running commands to the router using plink and dumping them to a txt file for easier checking of things.
Thing is it chokes on color formatting.
Code:
[1;31mTop 10 Blocks (Inbound);[0m
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
[1;32m-*-[0m[1;32m--*[0m [1;32m*--[0m3x | 92.118.37.61 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.61 | BanMalware: normshield_high_attack.ipset |
[1;32m-*-[0m[1;32m--*[0m [1;32m*--[0m2x | 185.176.27.110 (BG) | https://otx.alienvault.com/indicator/ip/185.176.27.110 | BanMalware: blocklist_net_ua.ipset |
[1;32m-*-[0m[1;32m--*[0m2x | 130.117.72.42 (NL) | https://otx.alienvault.com/indicator/ip/130.117.72.42 | BanMalware: firehol_level3.netset |
[1;32m*--[0m[1;32m-*-[0m1x | 92.63.196.17 (RU) | https://otx.alienvault.com/indicator/ip/92.63.196.17 | BanMalware: normshield_high_attack.ipset |
[1;32m--*[0m [1;32m*--[0m[1;32m-*-[0m1x | 92.118.37.91 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.91 | BanMalware: normshield_high_attack.ipset |
[1;32m--*[0m [1;32m*--[0m[1;32m-*-[0m1x | 92.118.37.38 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.38 | BanMalware: normshield_high_attack.ipset |
[1;32m--*[0m [1;32m*--[0m[1;32m-*-[0m[1;32m--*[0m1x | 92.118.37.35 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.35 | BanMalware: normshield_high_attack.ipset |
[1;32m*--[0m[1;32m-*-[0m1x | 89.248.162.168 (NL) | https://otx.alienvault.com/indicator/ip/89.248.162.168 | BanMalware: normshield_high_attack.ipset |
[1;32m--*[0m [1;32m*--[0m[1;32m-*-[0m1x | 88.204.240.248 (KZ) | https://otx.alienvault.com/indicator/ip/88.204.240.248 | BanMalware: taichung.ipset |
[1;32m--*[0m [1;32m*--[0m[1;32m-*-[0m1x | 81.22.45.231 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.231 | BanMalware: alienvault_reputation.ipset |
=============================================================================================================
Butterfly Bones
Very Senior Member
Yes, see this post from Adamm.
https://www.snbforums.com/threads/r...urity-enhancements.16798/page-210#post-468351
Almost works. Still get some crazyness.
Code:
=============================================================================================================
[1;31mTop 10 Blocks (Inbound);
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
[1;32m-*-
[1;32m--*
[1;32m*--
3x | 92.118.37.61 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.61 | BanMalware: normshield_high_attack.ipset |
[1;32m-*-
[1;32m--*
[1;32m*--
2x | 81.22.45.231 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.231 | BanMalware: alienvault_reputation.ipset |
[1;32m-*-
[1;32m--*
2x | 81.22.45.193 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.193 | BanMalware: alienvault_reputation.ipset |
[1;32m*--
[1;32m-*-
2x | 185.176.27.110 (BG) | https://otx.alienvault.com/indicator/ip/185.176.27.110 | BanMalware: blocklist_net_ua.ipset |
[1;32m--*
[1;32m*--
[1;32m-*-
2x | 130.117.72.42 (NL) | https://otx.alienvault.com/indicator/ip/130.117.72.42 | BanMalware: firehol_level3.netset |
[1;32m--*
[1;32m*--
1x | 92.63.197.100 (UA) | https://otx.alienvault.com/indicator/ip/92.63.197.100 | BanMalware: normshield_high_bruteforce.ipset |
[1;32m-*-
[1;32m--*
1x | 92.63.196.17 (RU) | https://otx.alienvault.com/indicator/ip/92.63.196.17 | BanMalware: normshield_high_attack.ipset |
[1;32m*--
[1;32m-*-
[1;32m--*
1x | 92.118.37.91 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.91 | BanMalware: normshield_high_attack.ipset |
[1;32m*--
[1;32m-*-
[1;32m--*
1x | 92.118.37.81 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.81 | BanMalware: firehol_level3.netset |
[1;32m*--
[1;32m-*-
[1;32m--*
1x | 92.118.37.38 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.38 | BanMalware: normshield_high_attack.ipset |
=============================================================================================================Butterfly Bones
Very Senior Member
Darn, something changed since that post, I tried back then just to learn. Now it is above my pay grade, so someone else will know.
Adamm
Part of the Furniture
Make sure you are using the exact command;
Code:
skynet@RT-AX88U-DC28:/tmp/home/root# sh /jffs/scripts/firewall stats | sed -r 's/'$(echo -e "\033")'\[[0-9]{1,2}(;([0-9]{1,2})?)?[mK]//g' | strings
[?7l
[J#############################################################################################################
# _____ _ _ __ #
# / ____| | | | / / #
# | (___ | | ___ _ _ __ ___| |_ __ __/ /_ #
# \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \ #
# ____) | <| |_| | | | | __/ |_ \ V /| (_) | #
# |_____/|_|\_\\__, |_| |_|\___|\__| \_/ \___/ #
# __/ | #
# |___/ #
# #
-snip-
=============================================================================================================
Last 10 Unique Connections Blocked (Inbound);
-------------- | -------------- | -------------- | ----------------------
| IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------------- | -------------- | -------------- | ----------------------
92.118.37.47 (GR) | https://otx.alienvault.com/indicator/ip/92.118.37.47 | BanMalware: normshield_high_attack.ipset |
88.214.26.55 (SC) | https://otx.alienvault.com/indicator/ip/88.214.26.55 | BanMalware: firehol_level3.netset* |
185.254.122.12 (LT) | https://otx.alienvault.com/indicator/ip/185.254.122.12 | BanMalware: firehol_level3.netset* |
193.32.160.35 (NL) | https://otx.alienvault.com/indicator/ip/193.32.160.35 | BanMalware: alienvault_reputation.ipset |
185.153.196.142 (MD) | https://otx.alienvault.com/indicator/ip/185.153.196.142 | BanMalware: firehol_level3.netset* |
185.176.27.118 (BG) | https://otx.alienvault.com/indicator/ip/185.176.27.118 | BanMalware: normshield_high_attack.ipset |
5.188.206.34 (BG) | https://otx.alienvault.com/indicator/ip/5.188.206.34 | BanMalware: firehol_level3.netset* |
185.25.204.80 (IT) | https://otx.alienvault.com/indicator/ip/185.25.204.80 | BanMalware: taichung.ipset |
107.170.203.150 (US) | https://otx.alienvault.com/indicator/ip/107.170.203.150 | BanMalware: taichung.ipset |
81.22.45.228 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.228 | BanMalware: spamhaus_edrop.netset* |
=============================================================================================================
Last 10 Unique Connections Blocked (Outbound);
-------------- | -------------- | -------------- | ----------------------
| IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------------- | -------------- | -------------- | ----------------------
8.8.8.8 (US) | https://otx.alienvault.com/indicator/ip/8.8.8.8 | ManualBan: ffffffffffffffffffffffffffffffffff |
=============================================================================================================
Last 10 Manual Bans;
-------------- | -------------- | -------------- | ----------------------
| IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------------- | -------------- | -------------- | ----------------------
8.8.8.8 (US) | https://otx.alienvault.com/indicator/ip/8.8.8.8 | ManualBan: ffffffffffffffffffffffffffffffffff |
=============================================================================================================
Last 10 Unique HTTP(s) Blocks (Outbound);
-------------- | -------------- | -------------- | ----------------------
| IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------------- | -------------- | -------------- | ----------------------
=============================================================================================================
Top 10 HTTP(s) Blocks (Outbound);
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
=============================================================================================================
Top 10 Blocks (Inbound);
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
986x | 185.254.122.12 (LT) | https://otx.alienvault.com/indicator/ip/185.254.122.12 | BanMalware: firehol_level3.netset* |
779x | 193.32.160.35 (NL) | https://otx.alienvault.com/indicator/ip/193.32.160.35 | BanMalware: alienvault_reputation.ipset |
533x | 88.214.26.55 (SC) | https://otx.alienvault.com/indicator/ip/88.214.26.55 | BanMalware: firehol_level3.netset* |
339x | 5.188.206.34 (BG) | https://otx.alienvault.com/indicator/ip/5.188.206.34 | BanMalware: firehol_level3.netset* |
88x | 81.22.45.184 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.184 | BanMalware: normshield_high_attack.ipset |
70x | 81.22.45.210 (DE) | https://otx.alienvault.com/indicator/ip/81.22.45.210 | BanMalware: normshield_high_attack.ipset |
62x | 185.153.196.142 (MD) | https://otx.alienvault.com/indicator/ip/185.153.196.142 | BanMalware: firehol_level3.netset* |
42x | 92.63.196.17 (RU) | https://otx.alienvault.com/indicator/ip/92.63.196.17 | BanMalware: normshield_high_attack.ipset |
33x | 89.248.162.168 (NL) | https://otx.alienvault.com/indicator/ip/89.248.162.168 | BanMalware: normshield_high_attack.ipset |
21x | 185.176.27.118 (BG) | https://otx.alienvault.com/indicator/ip/185.176.27.118 | BanMalware: normshield_high_attack.ipset |
=============================================================================================================
Top 10 Blocks (Outbound);
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
2x | 8.8.8.8 (US) | https://otx.alienvault.com/indicator/ip/8.8.8.8 | ManualBan: ffffffffffffffffffffffffffffffffff |
=============================================================================================================
Top 10 IOT Blocks (Outbound);
-------- | -------------- | -------------- | -------------- | ----------------------
| Hits | | | IP Address | | | AlienVault | | | Ban Reason | | | Associated Domains |
-------- | -------------- | -------------- | -------------- | ----------------------
=============================================================================================================
Top 10 Blocked Devices (Outbound);
-------- | ------------ | ---------------
| Hits | | | Local IP | | | Device Name |
-------- | ------------ | ---------------
2x | 192.168.1.100 | Skynet-PC
=============================================================================================================
[#] 161532 IPs (+0) -- 1841 Ranges Banned (+0) || 2908 Inbound -- 0 Outbound Connections Blocked! [stats] [29s]It is something specifically with using plink. If i run it locally through putty its fine. But plink picks up the animated green moving *.
Guess I need to mess with the regex to pull that out too.
Code:
@ECHO OFF
plink.exe -load "mpu.cbn.lan" -T "sh /jffs/scripts/firewall stats | sed -r 's/'$(echo -e "\033")'\[[0-9]{1,2}(;([0-9]{1,2})?)?[mK]//g' | strings" > output.txt
"C:\Program Files\Notepad++\notepad++.exe" output.txtGuess I need to mess with the regex to pull that out too.
Adamm
Part of the Furniture
I don't use plink so its probably specific to that client. But yes you can just add another sed command to the pipe and filter out whatever specific strings are showing up
Messy but it works.Darn, something changed since that post, I tried back then just to learn. Now it is above my pay grade, so someone else will know.
Code:
@ECHO OFF
plink.exe -load "mpu.cbn.lan" -T "sh /jffs/scripts/firewall stats | sed -r 's/'$(echo -e "\033")'\[[0-9]{1,2}(;([0-9]{1,2})?)?[mK]//g' | sed '/#/d' | sed 's/\[1;31m//' | sed '/\[1;32m/d' | strings" > output.txt
"C:\Program Files\Notepad++\notepad++.exe" output.txtThanks for the link to the post to get me going in the right direction.
Adamm
Part of the Furniture
davidlee93
Occasional Visitor
Why does skynet only add the first ip range and skips the rest? As far as I can tell the file is correctly formatted: https://raw.githubusercontent.com/vic958420/IPBlockList/master/ipaddresses.txt
Adamm
Part of the Furniture
Why does skynet only add the first ip range and skips the rest? As far as I can tell the file is correctly formatted: https://raw.githubusercontent.com/vic958420/IPBlockList/master/ipaddresses.txt
There are trailing white-spaces on almost every line, these are interfering with the regex.
davidlee93
Occasional Visitor
and how exactly do you remove these "white-spaces" as I tried every option is notepad++ and it could not find any white-spaces
Similar threads
Similar threads
Similar threads
-
-
Skynet Skynet showing router itself making calls to China?
- Started by Skywise
- Replies: 26
-
Skynet Skynet - Blocked outbounds coming from the router itself?
- Started by JuanGF
- Replies: 12
-
Skynet Installing Skynet causes router to crash and reboot
- Started by ovancantfort
- Replies: 26
-
Skynet I have installed the skynet firewall how do I configure it if the security of iot devices is important?
- Started by lenovomen
- Replies: 2
-
Skynet Message on SKYNET I havent seen before- Started by Davidncali001
- Replies: 1
-
-
-
Skynet SkyNet/Firewall blocking all ping requests, including outbound
- Started by nearlyheadlessarvie
- Replies: 6
-
Skynet SOLVED: Scrollbar Disappears on Skynet Tab on Asuswrt-Merlin 386.14
- Started by WRobertE
- Replies: 10
Latest threads
-
-
Gt-axe16000 good upgrade from AX-86U?
- Started by Mamba24
- Replies: 1
-
Please add Asuswrt-merlin to GT-BE98 (Non-pro) version
- Started by kaotic2499
- Replies: 5
-
Corrupted router specific partition on AX88U
- Started by nomad_surfer
- Replies: 1
-
Support SNBForums w/ Amazon
If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!