Skynet New Skynet 7.5.9 Release

[Quoc Huynh]

Clicking on "Adaptives QoS" in router main menu and then switching to Syslog causes Skynet to restart.
Can someone confirm?
And is that a normal behaviour?

I do not have this issue with Skynet on my RT-AX88U.

 

[Adamm]

Hello everybody, I faced strange issue and can't find out the reason or fixing method. Do anybody have an idea where to dig and how to fix that?

The Skynet installed on new system after reseting router, changing pluged to the router hdd, formating it and reinstalled Entware, amtm etc.

[1-5]: 2

Input Custom Filter List URL:

[URL]: https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

[$] /jffs/scripts/firewall banmalware https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

=============================================================================================================

killall: syslog-ng: no process killed

[i] Custom Filter Detected: https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list

[i] Downloading filter.list | [0s]

[i] Refreshing Whitelists | [7s]

[i] Consolidating Blacklist | [0s]

[*] List Content Error Detected - Stopping Banmalware

=============================================================================================================

[#] 1 IPs (+0) -- 0 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [banmalware] [7s]

[i] Press Enter To Continue...

P.s. any other links (ViktorJp or Somewhere Over The Raibow) are not working too

Does your isp resolve GitHub correctly? There’s been issues in the past where ISP’s have GitHub raw blocked.

 

[ukrainer]

I have the same problem with Skynet on an RT-AX88U like him as well. It is quite interesting that Skynet is working fine with Adamm default filter list, or list imported years before. However, when trying to import your list or Somewhere Over The Rainbow, the script shows a "List Content Error" message, and refused to use the new firewall list.
I was succeed with importing Somewhere Over The Rainbow list about 2 weeks ago, but now it may not work anymore. Therefore, I supposed the cause would be either Skynet itself, or the way Github formats their file storage @@

If so then solution is possible by improving algorithms of Skynet which are using for processing other kinds of filter lists...

 

[ukrainer]

Does your isp resolve GitHub correctly? There’s been issues in the past where ISP’s have GitHub raw blocked.

Yes, I open any files from this link as proper in the browser. We can compare what i get opening some specific link and what you get, to be sure there is no problem on the ISP side. But for now I don't see there any issues caused by ISP.

 

[SomeWhereOverTheRainBow]

Yes, I open any files from this link as proper in the browser

A true test is to perform a lookup to the domain from your router. It is known that a web browser can use a builtin DNS functionality to circumvent the ISP DNS, whereas skynet relies on the DNS services used by the router. The router will use the ISP by default unless you have a way around that enabled on the router.

 

[ukrainer]

A true test is to perform a lookup to the domain from your router. It is known that a web browser can use a builtin DNS functionality to circumvent the ISP DNS, whereas skynet relies on the DNS services used by the router. The router will use the ISP by default unless you have a way around that enabled on the router.

I did nslookup, traceroute and ping from the router to raw.githubusercontent.com and no issues found, but the filter lists from this source are still not working or work unstable (I could get filter update from raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list but still get issues after tries of getting updates of other filter lists from source raw.githubusercontent.com). So it is definitely not ISP related issue

 

[SomeWhereOverTheRainBow]

I did nslookup, traceroute and ping from the router to raw.githubusercontent.com and no issues found, but the filter lists from this source are still not working or work unstable (I could get filter update from raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/filter.list but still get issues after tries of getting updates of other filter lists from source raw.githubusercontent.com). So it is definitely not ISP related issue

If you have ipv6 enabled, disable it. I have seen when ipv6 is not correctly working, users have issues resolving from the router sometimes. <<--- This is just another possible place to check.
Also, check to make sure the routers ntp clock is set right. curl may be giving issues because of the time not being set correctly. <<--- Another place to check.

 

[ukrainer]

If you have ipv6 enabled, disable it. I have seen when ipv6 is not correctly working, users have issues resolving from the router sometimes. <<--- This is just another possible place to check.
Also, check to make sure the routers ntp clock is set right. curl may be giving issues because of the time not being set correctly. <<--- Another place to check.

Just turned off ipv6 support on the router and tried change filter list for:

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/filter.list

Or

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

Or

https://raw.githubusercontent.com/poudenes/skynet/main/filter.list

But nothing changed

 

[SomeWhereOverTheRainBow]

Just turned off ipv6 support on the router and tried change filter list for:

https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/filter.list

Or

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

Or

https://raw.githubusercontent.com/poudenes/skynet/main/filter.list

But nothing changed

This one will never work properly: https://raw.githubusercontent.com/poudenes/skynet/main/filter.list
because of this link https://github.com/firehol/blocklist-ipsets/ being present in the list.
It is downloading a full blown web page instead of a raw list. You could possibly be corrupting skynet with this list.
The link would be fine to be in the list if it was commented out.
like #https://github.com/firehol/blocklist-ipsets/
The only way to fix a corrupted skynet is a complete uninstall of skynet, then a complete reinstall.
Do not try https://raw.githubusercontent.com/poudenes/skynet/main/filter.list, until that link is commented out or removed from that list.

 

[ukrainer]

It seems the list https://github.com/firehol/blocklist-ipsets/ really corrupted my Skynet. But I found the second reason of my issue too - I used DNS-over-TLS and one of choosen DNS servers worker improper. So I totally uninstalled Skynet, reseted WAN DNS settings and setted them again in a proper way. Now two custom lists as the original one are working and updating correctly. Thank you for support!