Skynet New Skynet v8.0.7 Release

[John Fitzgerald]

Edit New Release 8.0.7, see post #177 : https://www.snbforums.com/threads/s...ecurity-enhancements.96167/page-9#post-976583

Edit New Release 8.0.6, see posts #148, #157, #159 : https://www.snbforums.com/threads/s...ecurity-enhancements.96167/page-8#post-976182


MAJOR REWRITE: version 8 is a major change going forward. Please visit Adamm's new post here:

Skynet - Skynet v8 - Router Firewall & Security Enhancements

📌 Skynet v8 - Router Firewall & Security Enhancements The largest upgrade in Skynet’s 11-year history Built exclusively for ASUSWRT-Merlin, Skynet v8 delivers a fully modernised codebase with major performance, reliability, and maintainability improvements - while keeping the familiar...

www.snbforums.com

***Skynet, Link on GitHub, regarding UPDATES and INFO: https://github.com/Adamm00/IPSet_ASUS

 

[dave14305]

It’s all about better reporting of client names in the stats/reports.

 

[thelonelycoder]

It’s all about better reporting of client names in the stats/reports.

Looks like that moment of clarity by @Adamm also helps the Diversion stats. @Jack Yaz this might also be of interest to you.

Show Device Name for Top 10 Blocked Devices (Outbound) · Issue #107 · Adamm00/IPSet_ASUS

I searched but didn't get a hit for this. In the Top 10 Blocked Devices (Outbound) table I see the IP and then "(Unknown)" In the Client List I have this device named similar to "Wife iPhone" but I...

github.com

 

[SomeWhereOverTheRainBow]

Looks like that moment of clarity by @Adamm also helps the Diversion stats. @Jack Yaz this might also be of interest to you.

Show Device Name for Top 10 Blocked Devices (Outbound) · Issue #107 · Adamm00/IPSet_ASUS

I searched but didn't get a hit for this. In the Top 10 Blocked Devices (Outbound) table I see the IP and then "(Unknown)" In the Client List I have this device named similar to "Wife iPhone" but I...

github.com

definitely a nice improvement!

 

[Adamm]

Looks like that moment of clarity by @Adamm also helps the Diversion stats. @Jack Yaz this might also be of interest to you.

Show Device Name for Top 10 Blocked Devices (Outbound) · Issue #107 · Adamm00/IPSet_ASUS

I searched but didn't get a hit for this. In the Top 10 Blocked Devices (Outbound) table I see the IP and then "(Unknown)" In the Client List I have this device named similar to "Wife iPhone" but I...

github.com

Sometimes the most obvious solutions are the most elusive. For years the lack of client identification was very frustrating, this essentially solves the issue and can be dropped into any script that also identifies clients in one way or another. I’d love to get some feedback from users if their client lists in Skynet (i.e “debug info” output) are dramatically more populated now.

Hopefully the cached OUI DB can be updated at some point by @RMerlin but I believe the reference file hosted by Asus is also out of date.

 

[RMerlin]

Hopefully the cached OUI DB can be updated at some point by @RMerlin but I believe the reference file hosted by Asus is also out of date.

Yeah, I looked at it during the 388.6 alpha cycle, and Asus still hadn't updated it on their end since last year.

I would need to write my own parser to process a public OUI database to convert it to the same format Asus uses - not something I feel like devoting efforts to at this time. I should check with them if they have a script they could provide me so I could generate updates myself.

 

[visortgw]

Sometimes the most obvious solutions are the most elusive. For years the lack of client identification was very frustrating, this essentially solves the issue and can be dropped into any script that also identifies clients in one way or another. I’d love to get some feedback from users if their client lists in Skynet (i.e “debug info” output) are dramatically more populated now.

Hopefully the cached OUI DB can be updated at some point by @RMerlin but I believe the reference file hosted by Asus is also out of date.

All online devices are now fully populated now within Skynet "debug info" output. Thank you for yet another huge step forward!

 

[Blacklistedcard]

I noticed the version listed does not match the top version number.

#############################################################################################################
# #
# ███████╗██╗ ██╗██╗ ██╗███╗ ██╗███████╗████████╗ ██╗ ██╗███████╗ #
# ██╔════╝██║ ██╔╝╚██╗ ██╔╝████╗ ██║██╔════╝╚══██╔══╝ ██║ ██║╚════██║ #
# ███████╗█████╔╝ ╚████╔╝ ██╔██╗ ██║█████╗ ██║ ██║ ██║ ██╔╝ #
# ╚════██║██╔═██╗ ╚██╔╝ ██║╚██╗██║██╔══╝ ██║ ╚██╗ ██╔╝ ██╔╝ #
# ███████║██║ ██╗ ██║ ██║ ╚████║███████╗ ██║ ╚████╔╝ ██║ #
# ╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═══╝╚══════╝ ╚═╝ ╚═══╝ ╚═╝ #
# #
# Router Firewall And Security Enhancements #
# By Adamm - https://github.com/Adamm00/IPSet_ASUS #
# 10/01/2024 - v7.5.1 #
#############################################################################################################


=============================================================================================================


Router Model; RT-AX88U
Skynet Version; v7.4.6 (10/01/2024) (947a628282602419a1fbe59a32d069c8)
iptables v1.4.15 - (eth0 @ 192.168.1.1)
ipset v7.6, protocol version: 7

 

[Blacklistedcard]

Ignore my message. After it created the lock file it updated the version number.

#############################################################################################################
# #
# ███████╗██╗ ██╗██╗ ██╗███╗ ██╗███████╗████████╗ ██╗ ██╗███████╗ #
# ██╔════╝██║ ██╔╝╚██╗ ██╔╝████╗ ██║██╔════╝╚══██╔══╝ ██║ ██║╚════██║ #
# ███████╗█████╔╝ ╚████╔╝ ██╔██╗ ██║█████╗ ██║ ██║ ██║ ██╔╝ #
# ╚════██║██╔═██╗ ╚██╔╝ ██║╚██╗██║██╔══╝ ██║ ╚██╗ ██╔╝ ██╔╝ #
# ███████║██║ ██╗ ██║ ██║ ╚████║███████╗ ██║ ╚████╔╝ ██║ #
# ╚══════╝╚═╝ ╚═╝ ╚═╝ ╚═╝ ╚═══╝╚══════╝ ╚═╝ ╚═══╝ ╚═╝ #
# #
# Router Firewall And Security Enhancements #
# By Adamm - https://github.com/Adamm00/IPSet_ASUS #
# 10/01/2024 - v7.5.1 #
#############################################################################################################


=============================================================================================================


Router Model; RT-AX88U
Skynet Version; v7.5.1 (10/01/2024) (947a628282602419a1fbe59a32d069c8)
iptables v1.4.15 - (eth0 @ 192.168.1.1)
ipset v7.6, protocol version: 7

 

[RMerlin]

I should check with them if they have a script they could provide me so I could generate updates myself.

I am now able to update the database myself.

 

[visortgw]

Skynet 7.5.2 has been released.

 

[John Fitzgerald]

Skynet 7.5.3 has been released.

 

[visortgw]

Skynet 7.5.4 has been released.

v7.5.4

Create Generate_Random_Number()
Improve Check_Connection()
Fix syslog location showing as "custom" on newer models that default to jffs
Add Wireguard server support - Wireguard server clients are now filtered by Skynet
Add Wireguard support to IOT blocking

 

[visortgw]

Skynet 7.5.5 has been released.

v7.5.5

Fix rule insertion for invalid packet logging @dave14305

 

[HardCat]

Getting IPTables Rules [Failed] on version 7.5.5 here.

[*] Rule Integrity Violation - [ #23 ]

 

[Adamm]

Getting IPTables Rules [Failed] on version 7.5.5 here.

[*] Rule Integrity Violation - [ #23 ]

I just pushed another update. Let me know if that resolves it.

 

[HardCat]

I just pushed another update. Let me know if that resolves it.

Still getting the failure, this time:

[*] Rule Integrity Violation - [ #19 ]

 

[Adamm]

Still getting the failure, this time:

[*] Rule Integrity Violation - [ #19 ]

Third time is the charm

Update firewall.sh · Adamm00/IPSet_ASUS@a9d8ef8

Skynet - Advanced IP Blocking For ASUS Routers Using IPSet. - Update firewall.sh · Adamm00/IPSet_ASUS@a9d8ef8

github.com

 

[HardCat]

Third time is the charm

Update firewall.sh · Adamm00/IPSet_ASUS@a9d8ef8

Skynet - Advanced IP Blocking For ASUS Routers Using IPSet. - Update firewall.sh · Adamm00/IPSet_ASUS@a9d8ef8

github.com

That's it, up and running again! Thanks for your many years of support!!!

 

[Viktor Jaep]

Feels like a game of whackamole, @Adamm! Lol