Skynet New Skynet 7.5.9 Release

[dave14305]

The router is connected to a cable modem from my provider, first part of the WAN IP is 85.147.
Until last December I had an RT-AC86U which was also connected directly to the cable modem providing the rest of the network IP's
In December my old router died on me, but it was working perfectly, I could see all the data in the Skynet tab in the router interface
I have used this configuration for years, and Skynet always gave me all the data, only after installing the new RT-AX88U Pro I don't see data and the logfile stays a steady 0 bytes

Just to be sure, what is the output of nvram get wan_ifname

 

[Toby the Cat]

Just to be sure, what is the output of nvram get wan_ifname

 

[dave14305]

View attachment 56219

Something is insulating your WAN interface from the normal public internet scanning traffic one would expect. What if you ping a blocked IP? ping 2.56.192.0. Do you see any outbound blocked messages in the syslog?

 

[Toby the Cat]

Something is insulating your WAN interface from the normal public internet scanning traffic one would expect. What if you ping a blocked IP? ping 2.56.192.0. Do you see any outbound blocked messages in the syslog?

Pinging the IP, nothing in the logfiles

 

[Toby the Cat]

I must admit I don't understand exactly how this is working, I can only say that with my old router Skynet was working perfectly with the same setup

 

[dave14305]

I must admit I don't understand exactly how this is working, I can only say that with my old router Skynet was working perfectly with the same setup

please post the output of the Skynet debug command.

firewall debug info extended

 

[Toby the Cat]

please post the output of the Skynet debug command.

firewall debug info extended

Here we go, I hope you can read it, anyway thanks for helping

 

[dave14305]

I hope you can read it

I cannot. Try two separate images, ignoring the device list (don’t need it).

 

[Viktor Jaep]

I cannot. Try two separate images, ignoring the device list (don’t need it).

I can read it perfectly fine... do you need some new prescription glasses, @dave14305?? LOL

(zoomed in 250%)

@Toby the Cat ... just copy & paste the text from your clipboard...

 

[Toby the Cat]

Clipboard text won't work because of to many characters, below the list without the devices

 

[Toby the Cat]

-------------------- | ----------
| Test Description | | | Result |
-------------------- | ----------

Internet-Connectivity | [Passed]
Write Permission | [Passed]
Config File | [Passed]
Firewall-Start Entry | [Passed]
Services-Stop Entry | [Passed]
Service-Event Entry | [Passed]
Profile.add Entry | [Passed]
SWAP File | [Passed]
Cron Jobs | [Passed]
NTP Sync | [Passed]
IPSet Comment Support | [Passed]
Log Level 5 Settings | [Passed]
Duplicate Rules In RAW | [Passed]
IPSets | [Passed]
IPTables Rules | [Passed]
Local WebUI Files | [Passed]
Mounted WebUI Files | [Passed]
MenuTree.js Entry | [Passed]


----------- | ----------
| Setting | | | Status |
---------- | ----------

Skynet Auto-Updates | [Enabled]
Malware List Auto-Updates | [Enabled]
Logging | [Enabled]
Filter Traffic | [Enabled]
Unban PrivateIP | [Enabled]
Log Invalid Packets | [Disabled]
Import AiProtect Data | [Enabled]
Secure Mode | [Enabled]
Fast Switch List | [Disabled]
Syslog Location | [Default]
IOT Blocking | [Disabled]
Country Lookup For Stats | [Enabled]
CDN Whitelisting | [Enabled]
Display WebUI | [Enabled]

18/18 Tests Sucessful


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Feb 05 16:00:01 ##

## Installer ##
model="RT-AX88U_Pro"
localver="v7.5.6"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate=""
logmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/Skynet_fire/myswap.swp"

## Counters / Lists ##
blacklist1count="33502"
blacklist2count="2512"
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"
syslogloc="/jffs/syslog.log"
syslog1loc="/jffs/syslog.log-1"
iotblocked="disabled"
iotports=""
iotproto="udp"
lookupcountry="enabled"
cdnwhitelist="enabled"
displaywebui="enabled"

################################################


=============================================================================================================


[#] 33502 IPs (+0) -- 2512 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [debug] [5s]

admin@RT-AX88U_Pro-8A28:/tmp/home/root#

 

[dave14305]

I went back and squinted at your earlier screenshot, and your WAN IP is a private address (in red), despite you claiming it was a public IP. So your cable modem is likely acting as a gateway and needs to be bridge mode or some other method to let the Asus get a real public WAN IP. Skynet must have warned you about this during install.

 

[Viktor Jaep]

-------------------- | ----------
| Test Description | | | Result |
-------------------- | ----------

Internet-Connectivity | [Passed]
Write Permission | [Passed]
Config File | [Passed]
Firewall-Start Entry | [Passed]
Services-Stop Entry | [Passed]
Service-Event Entry | [Passed]
Profile.add Entry | [Passed]
SWAP File | [Passed]
Cron Jobs | [Passed]
NTP Sync | [Passed]
IPSet Comment Support | [Passed]
Log Level 5 Settings | [Passed]
Duplicate Rules In RAW | [Passed]
IPSets | [Passed]
IPTables Rules | [Passed]
Local WebUI Files | [Passed]
Mounted WebUI Files | [Passed]
MenuTree.js Entry | [Passed]


----------- | ----------
| Setting | | | Status |
---------- | ----------

Skynet Auto-Updates | [Enabled]
Malware List Auto-Updates | [Enabled]
Logging | [Enabled]
Filter Traffic | [Enabled]
Unban PrivateIP | [Enabled]
Log Invalid Packets | [Disabled]
Import AiProtect Data | [Enabled]
Secure Mode | [Enabled]
Fast Switch List | [Disabled]
Syslog Location | [Default]
IOT Blocking | [Disabled]
Country Lookup For Stats | [Enabled]
CDN Whitelisting | [Enabled]
Display WebUI | [Enabled]

18/18 Tests Sucessful


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Feb 05 16:00:01 ##

## Installer ##
model="RT-AX88U_Pro"
localver="v7.5.6"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate=""
logmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/Skynet_fire/myswap.swp"

## Counters / Lists ##
blacklist1count="33502"
blacklist2count="2512"
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"
syslogloc="/jffs/syslog.log"
syslog1loc="/jffs/syslog.log-1"
iotblocked="disabled"
iotports=""
iotproto="udp"
lookupcountry="enabled"
cdnwhitelist="enabled"
displaywebui="enabled"

################################################


=============================================================================================================


[#] 33502 IPs (+0) -- 2512 Ranges Banned (+0) || 0 Inbound -- 0 Outbound Connections Blocked! [debug] [5s]

admin@RT-AX88U_Pro-8A28:/tmp/home/root#

Your settings look identical to mine... are you seeing any activity in your syslog when you look at your Merlin web UI, under Advanced Settings -> System Logs? Entries looking something like this?

Feb  5 11:19:33 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:42:1a:59:3c:88:00:01:5c:a2:6a:46:08:00 SRC=103.187.191.205 DST=171.153.32.4 LEN=44 TOS=0x00 PREC=0x00 TTL=223 ID=54321 PROTO=TCP SPT=44120 DPT=9088 SEQ=3740786266 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000
Feb  5 11:19:44 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:42:1a:59:3c:88:00:01:5c:a2:6a:46:08:00 SRC=92.63.197.224 DST=171.153.32.4 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=48675 PROTO=TCP SPT=50391 DPT=37785 SEQ=3053943467 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

 

[Toby the Cat]

I went back and squinted at your earlier screenshot, and your WAN IP is a private address (in red), despite you claiming it was a public IP. So your cable modem is likely acting as a gateway and needs to be bridge mode or some other method to let the Asus get a real public WAN IP. Skynet must have warned you about this during install.

You are correct, Skynet gave me a warning, but because my setup has been like this for years now with my old RT-AC86U I thought carry on, I did not realise that the latest Skynet doesn't work when with a setup like mine

 

[Toby the Cat]

Your settings look identical to mine... are you seeing any activity in your syslog when you look at your Merlin web UI, under Advanced Settings -> System Logs? Entries looking something like this?

Feb  5 11:19:33 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:42:1a:59:3c:88:00:01:5c:a2:6a:46:08:00 SRC=103.187.191.205 DST=171.153.32.4 LEN=44 TOS=0x00 PREC=0x00 TTL=223 ID=54321 PROTO=TCP SPT=44120 DPT=9088 SEQ=3740786266 ACK=0 WINDOW=65535 RES=0x00 SYN URGP=0 OPT (020405B4) MARK=0x8000000
Feb  5 11:19:44 kernel: [BLOCKED - INBOUND] IN=eth0 OUT= MAC=04:42:1a:59:3c:88:00:01:5c:a2:6a:46:08:00 SRC=92.63.197.224 DST=171.153.32.4 LEN=40 TOS=0x00 PREC=0x00 TTL=227 ID=48675 PROTO=TCP SPT=50391 DPT=37785 SEQ=3053943467 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 MARK=0x8000000

No [BLOCKED - INBOUND] is found in my log file, sorry

This is my loglevel

 

[visortgw]

You are correct, Skynet gave me a warning, but because my setup has been like this for years now with my old RT-AC86U I thought carry on, I did not realise that the latest Skynet doesn't work when with a setup like mine

Simple fix. Call your ISP, and ask them to put modem in bridge mode.

 

[Viktor Jaep]

No [BLOCKED - INBOUND] is found in my log file, sorry

Did you ever see these before when you were on your old AC86U?

 

[dave14305]

You are correct, Skynet gave me a warning, but because my setup has been like this for years now with my old RT-AC86U I thought carry on, I did not realise that the latest Skynet doesn't work when with a setup like mine

Skynet has always worked like this, so I’m guessing your modem got reset/reconfigured when you got the new router.

 

[Toby the Cat]

@visortgw
I hear what you are saying, but before I do that I would like to understand why in my old situation everything worked perfect, and after the installation of my new Asus router it doesn't, could you possibly explain this to me

Old situation Cable modem --> Asus RT-AC86 Skynet working perfect
New Situation Cable modem --> Asus RT-AX88U Pro Skynet No data to display and logfile stays at 0 bytes

@Viktor Jaep
Yes I often saw these entry's when I was browsing the logfile to see what was going on out of curiosity

@dave14305
The cable modem is either working in Bridged mode, or as a regular router, I tried with a few laptops connected to the cable modem via an UTP cable, it's still in router mode like it has been for years

 

[dave14305]

The cable modem is either working in Bridged mode, or as a regular router, I tried with a few laptops connected to the cable modem via an UTP cable, it's still in router mode like it has been for years

Maybe you made some configurations on the cable modem to forward all traffic to the IP of the old router, which would probably be different now due to a new Asus MAC address. It’s not the router. Something with the cable modem needs changing, probably because the router is not the same physical device as before.