What's new

Skynet Skynet - Router Firewall & Security Enhancements

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

I think I've found an unmanaged? situation. If I have an activated swap partition on /dev/sda1 the skynet's installer couldn't finish without errors, so it didn't work. After swapoff /dev/sda1 the installer and skynet works fine. Could you investigate it? As I remember swap partition existence wasn't problem before...It's not a huge problem, because I can use swap file instead of swap partition.
Skynet's author says that a swap file is what is supported not swap partition.
 
Could you investigate it? As I remember swap partition existence wasn't problem before...It's not a huge problem, because I can use swap file instead of swap partition.
@Adamm and I agree, from a swap management perspective in a script, a swap file is simpler to manage and create.
We standardized how to create, manage and enable the swap file in our applications. A swap file created in Skynet can therefore also be managed in amtm and Diversion.
 
I think I've found an unmanaged? situation. If I have an activated swap partition on /dev/sda1 the skynet's installer couldn't finish without errors, so it didn't work. After swapoff /dev/sda1 the installer and skynet works fine. Could you investigate it? As I remember swap partition existence wasn't problem before...It's not a huge problem, because I can use swap file instead of swap partition.

@Adamm and I agree, from a swap management perspective in a script, a swap file is simpler to manage and create.
We standardized how to create, manage and enable the swap file in our applications. A swap file created in Skynet can therefore also be managed in amtm and Diversion.

Swap files are definetely preferrable and makes it much easier for us to assist users. With that being said Skynet with recent updates has minor support (or should I say detection) for swap partitions, but only if their mount entry is in "/jffs/configs/fstab"
 
Swap files are definetely preferrable and makes it much easier for us to assist users. With that being said Skynet with recent updates has minor support (or should I say detection) for swap partitions, but only if their mount entry is in "/jffs/configs/fstab"

Thanks for the clarification (and of course your hard work). It wasn't clear enough before. Maybe an extended syslog entry (.. swap partitions not/partially supported) or an updated documentation or faq should be helpful for others to avoid confusions.
 
What can Skynet have blocked here?

(since Siri is working now I can't reproduce?)
It was broken again today, so now I could check!

Skynet is blocking mu21p02sa.guzzoni-apple.com.akadns.net (17.130.74.5):

Code:
add Skynet-Blacklist 17.130.74.5 comment "BanMalware"

Since that is owned by Apple according to AlientVault I whitelisted it:

Code:
add Skynet-Whitelist 17.130.74.5 comment "ManualWlistD: mu21p02sa.guzzoni-apple.com.akadns.net"

Siri works again after doing that!

How could this end up as BanMalware?
 
With Apple devices on your network, I recommend whitelisting the entire 17.0.0.0/8 range. Otherwise, you're going to have another problem down the line (been there done that).

NetRange: 17.0.0.0 - 17.255.255.255
CIDR: 17.0.0.0/8
NetName: APPLE-WWNET
NetHandle: NET-17-0-0-0-1
Parent: ()
NetType: Direct Assignment
OriginAS:
Organization: Apple Inc. (APPLEC-1-Z)
RegDate: 1990-04-15
Updated: 2017-07-08
Ref: https://rdap.arin.net/registry/ip/17.0.0.0
 
It was broken again today, so now I could check!

Skynet is blocking mu21p02sa.guzzoni-apple.com.akadns.net (17.130.74.5):

Code:
add Skynet-Blacklist 17.130.74.5 comment "BanMalware"

Since that is owned by Apple according to AlientVault I whitelisted it:

Code:
add Skynet-Whitelist 17.130.74.5 comment "ManualWlistD: mu21p02sa.guzzoni-apple.com.akadns.net"

Siri works again after doing that!

How could this end up as BanMalware?

I don’t maintain the blacklists so I can’t answer that question, but I have gone ahead and added apples IP space to the global whitelist to prevent future issues.
 
I don’t maintain the blacklists so I can’t answer that question, but I have gone ahead and added apples IP space to the global whitelist to prevent future issues.
In order to update your addition of the apple space - do we simply need to run an update of the blocking files - under b 4 from your menu system?
 
In order to update your addition of the apple space - do we simply need to run an update of the blocking files - under b 4 from your menu system?
Sorted - update b 4 made the changes - no apple space blocked anymore :)
Many thanks
 
Can't get Skynet to work on the RT-AX88U

System Log
Nov 14 16:46:55 dropbear[12539]: Password auth succeeded for 'administrator0f5kc6a' from 10.0.0.243:49989
Nov 14 16:47:34 rc_service: service 13006:notify_rc restart_firewall
Nov 14 16:47:34 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Nov 14 16:47:34 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Nov 14 16:47:34 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/Network/skynet )

login as: administrator0f5kc6a
administrator0f5kc6a@10.0.0.1's password:
ASUSWRT-Merlin RT-AX88U 384.8-alpha3-g6261ef60f Mon Nov 12 03:17:01 UTC 2018
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root# /usr/sbin/curl --retry 3 "htt
ps://raw.githubusercontent.com/Adamm00/IPSet_ASUS/master/firewall.sh" -o "/jffs/
scripts/firewall" && chmod +x /jffs/scripts/firewall && sh /jffs/scripts/firewal
l install
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 148k 100 148k 0 0 366k 0 --:--:-- --:--:-- --:--:-- 368k
#############################################################################################################
# _____ _ _ __ #
# / ____| | | | / / #
# | (___ | | ___ _ _ __ ___| |_ __ __/ /_ #
# \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \ #
# ____) | <| |_| | | | | __/ |_ \ V /| (_) | #
# |_____/|_|\_\\__, |_| |_|\___|\__| \_/ \___/ #
# __/ | #
# |___/ #
# #
## - 14/11/2018 - Asus Firewall Addition By Adamm v6.5.7 #
## https://github.com/Adamm00/IPSet_ASUS #
#############################################################################################################
Installing Skynet v6.5.7
Looking For Available Partitions
[1] --> /tmp/mnt/Network - (/dev/sda1)
Please Enter Partition Number Or e To Exit
[0-1]: 1
What Type Of Traffic Do You Want To Filter?
[1] --> All - (Recommended)
[2] --> Inbound
[3] --> Outbound
[e] --> Exit Menu
Please Select Option
[1-3]: 1
All Traffic Selected
Would You Like To Enable Debug Mode?
Debug Mode Is Used For Generating Stats And Monitoring Blocked IP's
[1] --> Yes - (Recommended)
[2] --> No
[e] --> Exit Menu
Please Select Option
[1-2]: 1
Debug Mode Enabled
Would You Like To Enable Automatic Malwarelist Updating?
[1] --> Yes (Daily) - (Recommended)
[2] --> Yes (Weekly)
[3] --> No
[e] --> Exit Menu
Please Select Option
[1-3]: 1
Malware List Updating Enabled & Scheduled For 2.25am Every Day
Would You Like To Enable Weekly Skynet Updating?
[1] --> Yes - (Recommended)
[2] --> No
[e] --> Exit Menu
Please Select Option
[1-2]: 1
Skynet Updating Enabled & Scheduled For 1.25am Every Monday
Select SWAP File Size:
[1] --> 256MB
[2] --> 512MB
[3] --> 1GB
[4] --> 2GB
[e] --> Exit Menu
[1-4]: 4
Creating SWAP File
2097152+0 records in
2097152+0 records out
Setting up swapspace version 1, size = 2147479552 bytes
UUID=876f4a58-82d1-4254-a0e5-2124dca59526
SWAP File Located At /tmp/mnt/Network/myswap.swp
[%] Restarting Firewall Service To Complete Installation
Done.
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root# sh /jffs/scripts/firewall
#############################################################################################################
# _____ _ _ __ #
# / ____| | | | / / #
# | (___ | | ___ _ _ __ ___| |_ __ __/ /_ #
# \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \ #
# ____) | <| |_| | | | | __/ |_ \ V /| (_) | #
# |_____/|_|\_\\__, |_| |_|\___|\__| \_/ \___/ #
# __/ | #
# |___/ #
# #
## - 14/11/2018 - Asus Firewall Addition By Adamm v6.5.7 #
## https://github.com/Adamm00/IPSet_ASUS #
#############################################################################################################
Router Model; RT-AX88U
Skynet Version; v6.5.7 (14/11/2018)
iptables v1.4.15 - (eth0 @ 10.0.0.1)
ipset v6.32, protocol version: 6
FW Version; 384.8_alpha3-g6261ef60f (Nov 11 2018) (4.1.51)
Install Dir; /tmp/mnt/Network/skynet (103.7G / 111.8G Space Available)
SWAP File; /tmp/mnt/Network/myswap.swp (2.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/Network/skynet
Checking Inbound Filter Rules... [Failed]
Checking Outbound Filter Rules... [Failed]
Select Menu Option:
[1] --> Unban
[2] --> Ban
[3] --> Banmalware
[4] --> Whitelist
[5] --> Import IP List
[6] --> Deport IP List
[7] --> Save
[8] --> Restart Skynet
[9] --> Temporarily Disable Skynet
[10] --> Update Skynet
[11] --> Settings
[12] --> Debug Options
[13] --> Stats
[14] --> Install Skynet
[15] --> Uninstall
[r] --> Reload Menu
[e] --> Exit Menu
[1-15]:
 
I've noticed that once I installed SkyNet, my SMB share has stopped working from inside my LAN. I have SMB share enabled, with guest enabled, in the router admin GUI, and SMB v1 + SMB v2 turned on there. USB3 hard drive, sharing stuff within the house. Everything else seems to be working perfectly fine, but I can't access this share from any other computer (or phone) from inside the LAN any longer.

When I try to connect on the LAN with a Windows machine, and let the Windows diagnostics run, it says "file and print sharing resource is online but isn't responding to connection attempts."

Any ideas? Any obvious settings I've missed (apologies, if so. I did try searching for similar issues before posting this).
Thanks.
 
Can't get Skynet to work on the RT-AX88U

I'm not sure if the firmware is ready or not yet for third party scripts, but assuming it is, please post the output of;

Code:
sh /jffs/scripts/firewall debug info extended
 
I have Diversion & DNScrypt-proxy working just cant get skynet to work.

Code:
login as: administrator0f5kc6a
administrator0f5kc6a@10.0.0.1's password:


ASUSWRT-Merlin RT-AX88U 384.8-alpha3-g6261ef60f Mon Nov 12 03:17:01 UTC 2018
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root# sh /jffs/scripts/firewall deb
ug info extended
#############################################################################################################
#                                _____ _                     _             __      #
#                               / ____| |                   | |           / /      #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_      #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \     #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |    #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/     #
#                                            __/ |                                 #
#                                           |___/                                  #
#                                                                                  #
## - 14/11/2018 -                  Asus Firewall Addition By Adamm v6.5.7          #
##                                 https://github.com/Adamm00/IPSet_ASUS                           #
#############################################################################################################


Router Model; RT-AX88U
Skynet Version; v6.5.7 (14/11/2018)
iptables v1.4.15 - (eth0 @ 10.0.0.1)
ipset v6.32, protocol version: 6
FW Version; 384.8_alpha3-g6261ef60f (Nov 11 2018) (4.1.51)
Install Dir; /tmp/mnt/Network/skynet (103.7G / 111.8G Space Available)
SWAP File; /tmp/mnt/Network/myswap.swp (2.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/Network/skynet
No Lock File Found

[i] Checking Internet Connectivity...                   [Passed]
[i] Checking Install Directory Write Permissions...     [Passed]
[i] Checking Firewall-Start Entry...                    [Passed]
[i] Checking Services-Stop Entry...                     [Passed]
[i] Checking CronJobs...                                [Passed]
[i] Checking IPSet Comment Support...                   [Passed]
[i] Checking Log Level 5 Settings...                    [Passed]
[i] Checking For Duplicate Rules In RAW...              [Passed]
[i] Checking Inbound Filter Rules...                    [Failed]
[i] Checking Inbound Debug Rules                        [Failed]
[i] Checking Outbound Filter Rules...                   [Failed]
[i] Checking Outbound Debug Rules                       [Failed]
[i] Checking Whitelist IPSet...                         [Passed]
[i] Checking BlockedRanges IPSet...                     [Passed]
[i] Checking Blacklist IPSet...                         [Passed]
[i] Checking Skynet IPSet...                            [Passed]
[i] Checking For Diversion Plus Content...              [Passed]

[i] Checking Autoupdate Setting...                      [Enabled]
[i] Checking Auto-Banmalware Update Setting...          [Enabled]
[i] Checking Debug Mode Setting...                      [Enabled]
[i] Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]
[i] Checking Fast Switch Setting...                     [Disabled]

13/17 Tests Sucessful.


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Nov 14 20:05:16 ##

## Installer ##
model="RT-AX88U"
localver="v6.5.7"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate="true"
debugmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/Network/myswap.swp"
swappartition=""

## Other ##
blacklist1count=""
blacklist2count=""
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"

################################################


[#] 0 IPs (+0) -- 0 Ranges Banned (+0) ||  Inbound --  Outbound Connections Blocked! [debug] [0s]

administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root#
 
Last edited:
I am having the same issue on RT-AX88U_384.8_alpha3-g6261ef60f, install Skynet fails on checking Inbound/Outbounding Filtering Rules.

Entware+Diversion installed success. Skynet fails.


Code:
Admin@RT-AX88U-76E8:/# sh /jffs/scripts/firewall debug info extended
#############################################################################################################
#                                _____ _                     _             __                               #
#                               / ____| |                   | |           / /                               #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_                               #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \                              #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |                             #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/                              #
#                                            __/ |                                                          #
#                                           |___/                                                           #
#                                                                                                           #
## - 14/11/2018 -                  Asus Firewall Addition By Adamm v6.5.7                                   #
##                                 https://github.com/Adamm00/IPSet_ASUS                                    #
#############################################################################################################


Router Model; RT-AX88U
Skynet Version; v6.5.7 (14/11/2018)
iptables v1.4.15 - (ppp0 @ 192.168.2.100)
ipset v6.32, protocol version: 6
FW Version; 384.8_alpha3-g6261ef60f (Nov 11 2018) (4.1.51)
Install Dir; /tmp/mnt/entware/skynet (1.5G / 3.8G Space Available)
SWAP File; /tmp/mnt/entware/myswap.swp (2.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/entware/skynet
No Lock File Found

[i] Checking Internet Connectivity...                   [Passed]
[i] Checking Install Directory Write Permissions...     [Passed]
[i] Checking Firewall-Start Entry...                    [Passed]
[i] Checking Services-Stop Entry...                     [Passed]
[i] Checking CronJobs...                                [Passed]
[i] Checking IPSet Comment Support...                   [Passed]
[i] Checking Log Level 5 Settings...                    [Passed]
[i] Checking For Duplicate Rules In RAW...              [Passed]
[i] Checking Inbound Filter Rules...                    [Failed]
[i] Checking Inbound Debug Rules                        [Failed]
[i] Checking Outbound Filter Rules...                   [Failed]
[i] Checking Outbound Debug Rules                       [Failed]
[i] Checking Whitelist IPSet...                         [Passed]
[i] Checking BlockedRanges IPSet...                     [Passed]
[i] Checking Blacklist IPSet...                         [Passed]
[i] Checking Skynet IPSet...                            [Passed]
[i] Checking For Diversion Plus Content...              [Dismissed]

[i] Checking Autoupdate Setting...                      [Enabled]
[i] Checking Auto-Banmalware Update Setting...          [Enabled]
[i] Checking Debug Mode Setting...                      [Enabled]
[i] Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]
[i] Checking Fast Switch Setting...                     [Disabled]

13/17 Tests Sucessful.


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Nov 15 10:29:03 ##

## Installer ##
model="RT-AX88U"
localver="v6.5.7"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate="true"
debugmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/entware/myswap.swp"
swappartition=""

## Other ##
blacklist1count=""
blacklist2count=""
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"

################################################


[#] 0 IPs (+0) -- 0 Ranges Banned (+0) ||  Inbound --  Outbound Connections Blocked! [debug] [0s]
 
I have Diversion & DNScrypt-proxy working just cant get skynet to work.

Code:
login as: administrator0f5kc6a
administrator0f5kc6a@10.0.0.1's password:


ASUSWRT-Merlin RT-AX88U 384.8-alpha3-g6261ef60f Mon Nov 12 03:17:01 UTC 2018
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root# sh /jffs/scripts/firewall deb
ug info extended
#############################################################################################################
#                                _____ _                     _             __      #
#                               / ____| |                   | |           / /      #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_      #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \     #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |    #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/     #
#                                            __/ |                                 #
#                                           |___/                                  #
#                                                                                  #
## - 14/11/2018 -                  Asus Firewall Addition By Adamm v6.5.7          #
##                                 https://github.com/Adamm00/IPSet_ASUS                           #
#############################################################################################################


Router Model; RT-AX88U
Skynet Version; v6.5.7 (14/11/2018)
iptables v1.4.15 - (eth0 @ 10.0.0.1)
ipset v6.32, protocol version: 6
FW Version; 384.8_alpha3-g6261ef60f (Nov 11 2018) (4.1.51)
Install Dir; /tmp/mnt/Network/skynet (103.7G / 111.8G Space Available)
SWAP File; /tmp/mnt/Network/myswap.swp (2.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/Network/skynet
No Lock File Found

[i] Checking Internet Connectivity...                   [Passed]
[i] Checking Install Directory Write Permissions...     [Passed]
[i] Checking Firewall-Start Entry...                    [Passed]
[i] Checking Services-Stop Entry...                     [Passed]
[i] Checking CronJobs...                                [Passed]
[i] Checking IPSet Comment Support...                   [Passed]
[i] Checking Log Level 5 Settings...                    [Passed]
[i] Checking For Duplicate Rules In RAW...              [Passed]
[i] Checking Inbound Filter Rules...                    [Failed]
[i] Checking Inbound Debug Rules                        [Failed]
[i] Checking Outbound Filter Rules...                   [Failed]
[i] Checking Outbound Debug Rules                       [Failed]
[i] Checking Whitelist IPSet...                         [Passed]
[i] Checking BlockedRanges IPSet...                     [Passed]
[i] Checking Blacklist IPSet...                         [Passed]
[i] Checking Skynet IPSet...                            [Passed]
[i] Checking For Diversion Plus Content...              [Passed]

[i] Checking Autoupdate Setting...                      [Enabled]
[i] Checking Auto-Banmalware Update Setting...          [Enabled]
[i] Checking Debug Mode Setting...                      [Enabled]
[i] Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]
[i] Checking Fast Switch Setting...                     [Disabled]

13/17 Tests Sucessful.


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Nov 14 20:05:16 ##

## Installer ##
model="RT-AX88U"
localver="v6.5.7"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate="true"
debugmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/Network/myswap.swp"
swappartition=""

## Other ##
blacklist1count=""
blacklist2count=""
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"

################################################


[#] 0 IPs (+0) -- 0 Ranges Banned (+0) ||  Inbound --  Outbound Connections Blocked! [debug] [0s]

administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root#
I am having the same issue on RT-AX88U_384.8_alpha3-g6261ef60f, install Skynet fails on checking Inbound/Outbounding Filtering Rules.

Entware+Diversion installed success. Skynet fails.


Code:
Admin@RT-AX88U-76E8:/# sh /jffs/scripts/firewall debug info extended
#############################################################################################################
#                                _____ _                     _             __                               #
#                               / ____| |                   | |           / /                               #
#                              | (___ | | ___   _ _ __   ___| |_  __   __/ /_                               #
#                               \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \                              #
#                               ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |                             #
#                              |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/                              #
#                                            __/ |                                                          #
#                                           |___/                                                           #
#                                                                                                           #
## - 14/11/2018 -                  Asus Firewall Addition By Adamm v6.5.7                                   #
##                                 https://github.com/Adamm00/IPSet_ASUS                                    #
#############################################################################################################


Router Model; RT-AX88U
Skynet Version; v6.5.7 (14/11/2018)
iptables v1.4.15 - (ppp0 @ 192.168.2.100)
ipset v6.32, protocol version: 6
FW Version; 384.8_alpha3-g6261ef60f (Nov 11 2018) (4.1.51)
Install Dir; /tmp/mnt/entware/skynet (1.5G / 3.8G Space Available)
SWAP File; /tmp/mnt/entware/myswap.swp (2.0G)
Boot Args; /jffs/scripts/firewall start skynetloc=/tmp/mnt/entware/skynet
No Lock File Found

[i] Checking Internet Connectivity...                   [Passed]
[i] Checking Install Directory Write Permissions...     [Passed]
[i] Checking Firewall-Start Entry...                    [Passed]
[i] Checking Services-Stop Entry...                     [Passed]
[i] Checking CronJobs...                                [Passed]
[i] Checking IPSet Comment Support...                   [Passed]
[i] Checking Log Level 5 Settings...                    [Passed]
[i] Checking For Duplicate Rules In RAW...              [Passed]
[i] Checking Inbound Filter Rules...                    [Failed]
[i] Checking Inbound Debug Rules                        [Failed]
[i] Checking Outbound Filter Rules...                   [Failed]
[i] Checking Outbound Debug Rules                       [Failed]
[i] Checking Whitelist IPSet...                         [Passed]
[i] Checking BlockedRanges IPSet...                     [Passed]
[i] Checking Blacklist IPSet...                         [Passed]
[i] Checking Skynet IPSet...                            [Passed]
[i] Checking For Diversion Plus Content...              [Dismissed]

[i] Checking Autoupdate Setting...                      [Enabled]
[i] Checking Auto-Banmalware Update Setting...          [Enabled]
[i] Checking Debug Mode Setting...                      [Enabled]
[i] Checking Filter Traffic Setting...                  [Enabled]
[i] Checking Unban PrivateIP Setting...                 [Enabled]
[i] Checking Log Invalid Setting...                     [Disabled]
[i] Checking Ban AiProtect Setting...                   [Enabled]
[i] Checking Secure Mode Setting...                     [Enabled]
[i] Checking Fast Switch Setting...                     [Disabled]

13/17 Tests Sucessful.


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Nov 15 10:29:03 ##

## Installer ##
model="RT-AX88U"
localver="v6.5.7"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate="true"
debugmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/entware/myswap.swp"
swappartition=""

## Other ##
blacklist1count=""
blacklist2count=""
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="enabled"
fastswitch="disabled"

################################################


[#] 0 IPs (+0) -- 0 Ranges Banned (+0) ||  Inbound --  Outbound Connections Blocked! [debug] [0s]

So if I had to guess, I'd say the iptables rules are failing due to "match set" not working as expected on the new platform. Does the following command spit any errors?

Code:
iptables -t raw -I PREROUTING -i br0 -m set ! --match-set Skynet-Whitelist dst -m set --match-set Skynet-Master dst -j DROP

Unfortunately I don't have a test device yet to confirm so hopefully @RMerlin can use this information accordingly.
 
So if I had to guess, I'd say the iptables rules are failing due to "match set" not working as expected on the new platform. Does the following command spit any errors?

Code:
iptables -t raw -I PREROUTING -i br0 -m set ! --match-set Skynet-Whitelist dst -m set --match-set Skynet-Master dst -j DROP

Unfortunately I don't have a test device yet to confirm so hopefully @RMerlin can use this information accordingly.

Here is the results:
Code:
ASUSWRT-Merlin RT-AX88U 384.8-alpha3-g6261ef60f Mon Nov 12 03:17:01 UTC 2018
Admin@RT-AX88U-76E8:/tmp/home/root# iptables -t raw -I PREROUTING -i br0 -m set ! --match-set Skynet-Whi
h-set Skynet-Master dst -j DROP
iptables v1.4.15: Kernel module xt_set is not loaded in.

To @RMerlin, "iptables v1.4.15: Kernel module xt_set is not loaded in"
 
To @RMerlin, "iptables v1.4.15: Kernel module xt_set is not loaded in"

Probably a stupid question as the script automates the process, but does running the following command first resolve the error?

Code:
modprobe xt_set

If not, please post the output of the following;

Code:
lsmod
 
I've pushed v6.6.0

Code:
Validate domains in various functions
Consolidate swap validation code
Fix list names not showing in stats
Allow IPSet v7
General code cleanup
Add activity indicator
Rewrite stats function

The major visual change here being the new stats function output, it is significiantly improved and now neatly formatted. There is also an activity inidicator so you know Skynet is still working in the background.
 
I've pushed v6.6.0

Code:
Validate domains in various functions
Consolidate swap validation code
Fix list names not showing in stats
Allow IPSet v7
General code cleanup
Add activity indicator
Rewrite stats function

The major visual change here being the new stats function output, it is significiantly improved and now neatly formatted. There is also an activity inidicator so you know Skynet is still working in the background.

Love the visual changes for the stats..much easier on the eyes. Thanks @Adamm!
 
Code:
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root# iptables -t raw -I PREROUTING -i br0 -m set ! --match-set Skynet-Whitelist dst -m set --match-set Skynet-M
aster dst -j DROP
iptables: No chain/target/match by that name.
administrator0f5kc6a@RT-AX88U-8C80:/tmp/home/root#
 
Last edited:

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top