What's new
By:

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Recent content by johnsmallberries

  1. J

    Order of blacklist and whitelist in skynet

    Oh sorry yeah I interpreted his comments in the reverse. So everything works normally. I guess I'll try getting rid of some of the github CDN ranges or just deal with it through fail2ban. I guess the github CDN infrastructure is popular for attacks these days.
  2. J

    Order of blacklist and whitelist in skynet

    That is interesting I had the following and the IP was passed through and eventually hit my fail2ban: 20.102.40.205 is in the Skynet-Blacklist. Maybe something with the router. I rebooted and will monitor further and mention if the blacklisted ips are not getting trapped even thought there is a...
  3. J

    Order of blacklist and whitelist in skynet

    I have skynet 8.0.7 and I also run fail2ban on the hosts. I've noticed recently that a lot of IPs in the gitlab CDN (using the skynet default whitelists) are coming through and getting blocked by fail2ban, even though I have the specific IP already banned in skynet from the abuseipdb list. Am...
  4. J

    Skynet Skynet - Removing old ips from a previous import

    If you disable skynet, remove the tagged entries from skynet.ipset, and restart then it clears everything. Dropping the import list into the lists directory doesn't seem to work - it gets cleared out when the lists are updated.
  5. J

    Skynet Skynet - Removing old ips from a previous import

    Is that the workflow? I would have to keep the previous list I guess? For example, if I import a list from abuseipdb on the first of the month, and now 3 months later I want to update the list. I don't know which IPs from abuseipdb may no longer be on their list, so you are saying I should keep...
  6. J

    Skynet Skynet - Removing old ips from a previous import

    I've looked through the threads but couldn't find the recommended procedure for removing a previously imported blacklist of ips from a file. If I use option 5 or the firewall command to import a list of ip's from a local file, and then later want to update that list, the original ip's are still...
See more
Back
Top
✖