Asus ac86u firewall

[Nathan Owens]

Is there a way to instead of rejecting to use drop instead. I am getting many IPs and different ones possibly trying to find an open port

I’ve even used ssh to add drop instead of reject and even tried from source and seems my rules get ignored

 

[ColinTaylor]

Firmware version?

Can you provide an example of these "reject" rules. I only see REJECT being used in a few very specific cases (keyword and URL filtering). The vast majority of rules use DROP.

 

[L&LD]

Is Skynet an option?

https://www.snbforums.com/threads/release-skynet-router-firewall-security-enhancements.16798/

All you need is access to ssh into the router and a spare 2GB USB drive.

 

[thelonelycoder]

Is Skynet an option?

https://www.snbforums.com/threads/release-skynet-router-firewall-security-enhancements.16798/

All you need is access to ssh into the router and a spare 2GB USB drive.

Of which 1GB is used for the required swap file. I would go for a larger device that leaves room for future exploration into the scrips world.

 

[L&LD]

@EventPhotoMan the advantage for me is that I don't need to worry if it is too small (since it is the maximum supported size).

See the recent discussion where Skynet now requires 1GB minimum size for the swap file. That is a big increase from swap file = size of RAM (or for 'crazy' times two the size of RAM).

 

[Nathan Owens]

Is Skynet an option?

https://www.snbforums.com/threads/release-skynet-router-firewall-security-enhancements.16798/

All you need is access to ssh into the router and a spare 2GB USB drive.

I have that installed now but currently doesn’t show up in the webui though maybe router needs a restart after install, which will probably wait til I get home even though I could do it away from home as well.

 

[L&LD]

Are you running RMerlin 384.15_0 on your router?

Did you try doing an additional force update on Skynet before you reboot? Normally, a reboot isn't needed. (Or maybe, you didn't wait long enough for the router to settle and Skynet to fully load)?

 

[ColinTaylor]

@Nathan Owens

Firmware version?

Can you provide an example of these "reject" rules. I only see REJECT being used in a few very specific cases (keyword and URL filtering). The vast majority of rules use DROP.