Skynet Skynet - Router Firewall & Security Enhancements

[Rhialto]

Emphasis on the "or". Skynet will automatically handle this in the background assuming you have entware installed. Although the latest firmware version is generally recommended for the best user experience.

I can't find that in first post under installation, maybe I'm not looking at the right place.

Does it check the curl package from Entware then? How can I check if I have latest? I'm willing to try to update, I just want to avoid see it does not work and have to uninstall and look for/install again the version I use now.

 

[Adamm]

Does it check the curl package from Entware then? How can I check if I have latest?

opkg update
opkg upgrade curl
/opt/bin/curl --version

With that being said, v380.68_4 is over 2 years old and a security risk. If you care about your network I'd consider upgrading.

 

[Val D.]

Well it is a free world after all is it not? That also means that I can decide not to let some countries be acceptable for connection.

Feel free to continue blocking entire parts of Internet, but don't cross the line. Think about your personal safety also. Make sure your physical firewall is fully operational and is capable of preventing the impact of that fast approaching cast iron frying pan, dispatched in your direction by your better half.

 

[Adamm]

How did that tab get there

 

[Marin]

How did that tab get there

Nice!! This is definitely something to look forward to!


Sent from my iPhone using Tapatalk

 

[Kenji]

Hey friends,

I have a question about the settings. I have my router RT-AC86U which runs over a VPN client.
So Fritzbox> Asus Router> Openvpn Client> Home network via WiFi:

I have installed all scripts here. This also works. Unfortunately after about a day I have the problem that my PC shows that no internet connection can be established. Something is probably blocked by Skynet here. After restarting Skynet, it works again for a day. I have the log here:

Dec 29 13:25:18 lul kernel: [BLOCKED - INVALID] IN = eth0 OUT = MAC = b0: 6e: bf: 64: 95: a0: cc: ce: 1e: 0f: 09: 30: 08: 00 SRC = 192.168.178.1 DST = 192.168.178.33 LEN = 60 TOS = 0x00 PREC = 0x00 TTL = 64 ID = 14401 DF PROTO = TCP SPT = 38905 DPT = 80 SEQ = 3251262362 ACK = 0 WINDOW = 14600 RES = 0x00 SYN URGP = 0 OPT (020405B40101080A089F6CD10000000001030304) MARK = 0x8000000

I have now looked at what belongs to which IP.

That would be the WAN IP of the Asus router: WAN IP: 192.168.178.33 and the 192.168.178.1 would be the IP of the Fritzbox. I added this to the whitelist via IP. Would that be okay? Why is the connection to the Fritzbox blocked, where does the connection to the Internet come from? I had repeated the problem this morning.


Thanks for the help and sorry for the Google translation

lg. Philipp

 

[Wisiwyg]

How did that tab get there

Neat!

384.15 alpha1 changelog: - NEW: Added five mount points within /www to allow script developers to easily add their own pages to the webui.

Just when you thought it couldn't get much better.... boom!

 

[Mutzli]

How did that tab get there

I assume this will require firmware v384.15, Yes?

 

[Jack Yaz]

I assume this will require firmware v384.15, Yes?

Yes

 

[wbartels]

It took me some time. But now I have a working version.
See github for more info: https://github.com/Adamm00/IPSet_ASUS/issues/27

This proof of concept will demonstrate two new features:

• Only download new or changes ipsets (already implemented in Skynet 7)

1. Only update new or changed ipsets.
2. Use the ipset swap feature:

• Keep the current ipset working and load an (inactive) temp ipset in the background.
• Swap these two sets without any delay or downtime!

 

[XIII]

How did that tab get there

Will we also get a spoiler that reveals what is on that tab?

 

[Adamm]

Will we also get a spoiler that reveals what is on that tab?

Where’s the fun in that

Coming 2020’

 

[^Tripper^]

Coming 2020’

That’s just a couple of days away. We will hold you to your word!!!

 

[Jack Yaz]

That’s just a couple of days away. We will hold you to your word!!!

didn't say when in 2020 ;-)

 

[XIII]

I was visiting a family member earlier today and tried to remote SSH into my own router (at home) from my iPad, a few times. While this worked initially, it stopped suddenly. Initially I thought my router had crashed, but after changing the IP address of my iPad using a commercial VPN I could log in again and noticed that SkyNet had blocked the “regular” IP! After unbanning it, everything was fine again.

How can I prevent this in the future?

I’m not sure whether this family member has a static IP address, so I’m not sure I can/should whitelist it.

 

[5stringdeath]

I was visiting a family member earlier today and tried to remote SSH into my own router (at home) from my iPad, a few times. While this worked initially, it stopped suddenly. Initially I thought my router had crashed, but after changing the IP address of my iPad using a commercial VPN I could log in again and noticed that SkyNet had blocked the “regular” IP! After unbanning it, everything was fine again.

How can I prevent this in the future?

I’m not sure whether this family member has a static IP address, so I’m not sure I can/should whitelist it.

May I suggest you not turn on SSH from WAN, and instead VPN in first

 

[JohnD5000]

How did that tab get there

Hmmm, I have 384.15 alpha loaded and there is no tab on mine. Is there something else needed other than 384.15 alpha and skynet loaded to see tab? (It's on a RT-AC86U)?

 

[Jack Yaz]

Hmmm, I have 384.15 alpha loaded and there is no tab on mine. Is there something else needed other than 384.15 alpha and skynet loaded to see tab? (It's on a RT-AC86U)?

access to the super secret update
https://github.com/Adamm00/IPSet_ASUS/commit/11470b9bf51219042737c9addf0fac4bd90a3644

 

[JohnD5000]

access to the super secret update
https://github.com/Adamm00/IPSet_ASUS/commit/11470b9bf51219042737c9addf0fac4bd90a3644

ahh, I load it with amtm, I'm not even sure what to do with above. I guess I'll have to wait.

 

[dave14305]

I was visiting a family member earlier today and tried to remote SSH into my own router (at home) from my iPad, a few times. While this worked initially, it stopped suddenly. Initially I thought my router had crashed, but after changing the IP address of my iPad using a commercial VPN I could log in again and noticed that SkyNet had blocked the “regular” IP! After unbanning it, everything was fine again.

How can I prevent this in the future?

I’m not sure whether this family member has a static IP address, so I’m not sure I can/should whitelist it.

If they can setup a DDNS name for their WAN IP, you can add that name to your whitelist.