Skynet Blocklist installation skynet, New to forum and Asus routers. Need Guidance.

[Tony-311]

Hi, I am sorry if I have posted to the incorrect section but I had difficulty working out where to post.

I am new to Merlin. I have an RT-AX86U pro. Latest Merlin firmware as of today. I have installed diversion, skynet and FlexQOS.

So far all has been installed and working as far as I can tell. The part I am having trouble with is installing blocklists. I have found a few on this forum, one is a text file, the other is a .netset file. I have searched this forum and google for how to apply/install these blacklists into Skynet. I have not found a firm answer. I believe it would need to be done through Putty?? I believe the blocklist file would need to be on the usb plugged into the router???
I would be grateful if someone could point me to an installation procedure or similar. I am sure it is not too difficult but I have not been able to work it out yet?

 

[Klonoa]

You’ll need to configure Skynet directly through SSH. If you installed it via AMTM, just type amtm in your SSH session—there’ll be on-screen prompts guiding you through how to access and set up Skynet.

That said, I personally don’t recommend using Skynet. From what I’ve seen, it adds blocklists by resolving specific domains’ IPs—kind of like running nslookup—and then blocks those IPs. This method is both slow to apply and can increase DNS resolution delay, potentially even causing your router to crash or reboot.

 

[saison2023]

I am using Adguard Home and Skynet, with SomeWhereOverTheRainBow`s block list, and I am pretty happy with the result.
You will have to be comfortable with Putty and educate yourself to run commands, at least to configure but also to troubleshoot and add exception, because you will face false positive based on your needs.
I would recommend you to spend some time and search on this forum because there is plenty of threads that already explain how to achieve your goal
This could be difficult at the beginning but if you ended like me, you will be pretty happy with the end result.

 

[Tony-311]

You’ll need to configure Skynet directly through SSH. If you installed it via AMTM, just type amtm in your SSH session—there’ll be on-screen prompts guiding you through how to access and set up Skynet.

That said, I personally don’t recommend using Skynet. From what I’ve seen, it adds blocklists by resolving specific domains’ IPs—kind of like running nslookup—and then blocks those IPs. This method is both slow to apply and can increase DNS resolution delay, potentially even causing your router to crash or reboot.

Oh, Ok, I didn't know that it could be slow... I guess there is a lot I need to learn.

 

[Tony-311]

I am using Adguard Home and Skynet, with SomeWhereOverTheRainBow`s block list, and I am pretty happy with the result.
You will have to be comfortable with Putty and educate yourself to run commands, at least to configure but also to troubleshoot and add exception, because you will face false positive based on your needs.
I would recommend you to spend some time and search on this forum because there is plenty of threads that already explain how to achieve your goal
This could be difficult at the beginning but if you ended like me, you will be pretty happy with the end result.

Thank you. Sounds like good advice. I will leave Skynet installed, but I will not put any lists in it until I have familiarized myself more from this forum. No hurry. Good learning experience.

 

[dave14305]

From what I’ve seen, it adds blocklists by resolving specific domains’ IPs—kind of like running nslookup—and then blocks those IPs. This method is both slow to apply and can increase DNS resolution delay, potentially even causing your router to crash or reboot.

I don’t think that’s a fair representation of Skynet. It uses dnsmasq ipset results for whitelisting domains. Blocking comes from downloaded third party curated lists.

Thank you. Sounds like good advice. I will leave Skynet installed, but I will not put any lists in it until I have familiarized myself more from this forum. No hurry. Good learning experience.

Skynet comes with default lists. No need to veer from the defaults yet.

 

[Tony-311]

I don’t think that’s a fair representation of Skynet. It uses dnsmasq ipset results for whitelisting domains. Blocking comes from downloaded third party curated lists.

Skynet comes with default lists. No need to veer from the defaults yet.

Noted. Just got confused reading the forum with so many people asking for blocklists etc, I thought, Oh, I need that too.

 

[Tech9]

I thought, Oh, I need that too

You most likely don't need Skynet at all. The built-in firewall blocks all unsolicited connections by default and allows only return traffic. This means if you didn't ask for something it will be blocked. This IP-blocker script uses community blocklists and false positives are possible. If it hits your DNS server - you have no Internet. Use only if you can troubleshoot yourself.

 

[Tony-311]

You most likely don't need Skynet at all. The built-in firewall blocks all unsolicited connections by default and allows only return traffic. This means if you didn't ask for something it will be blocked. This IP-blocker script uses community blocklists and false positives are possible. If it hits your DNS server - you have no Internet. Use only if you can troubleshoot yourself.

Thank you. Its amazing what you can learn in a few hours if you just ask.