Router connecting to Astrill.com (VPN service)

[Bozdw]

Hi, I'm new here. Thanks for having me.

Pihole shows the router requested the IP address of Astrill.com. Why is that?
After searching I learned Astrill is a VPN service and made a VPN applet at some point but is not supposed to be part of Asuswrt-Merlin.
I didn't see Astrill mentionned anywhere in the settings or what I've read of the documentation either.

 

[ColinTaylor]

Router model?
Firmware version?

There's no reason for the router to be querying astrill.com. What was the exact domain name or IP address you saw?

Also, depending on how you have configured your router to work with Pihole it's possible that the request actually originated from a client on your LAN.

 

[Bozdw]

Router model?

RT-AC68U

Firmware version?

386.7_2

What was the exact domain name or IP address you saw?

Also, depending on how you have configured your router to work with Pihole it's possible that the request actually originated from a client on your LAN.

My Pihole is configured to show which client made the request. It was indeed the router asking for the IP address of "astrill.com".

 

[ColinTaylor]

RT-AC68U

386.7_2


My Pihole is configured to show which client made the request. It was indeed the router asking for the IP address of "astrill.com".

I can't think how that could be possible unless Astrill had been installed at sometime in the past.

 

[Bozdw]

I can't think how that could be possible unless Astrill had been installed at sometime in the past.

It's a fresh install from last week.
Are you sure astrill.com doesn't appear in the source code somewhere?

 

[ColinTaylor]

It's a fresh install.
Are you sure astrill.com doesn't appear in the source code somewhere?

I did a search of the source and didn't get any hits on astrill. But the online search is unreliable, so I'll download it and perform a proper search.

 

[Bozdw]

I have Skynet installed. I also tried the connmon and vnStat addons.

I'll download it and perform a proper search.

I appreciate it.

 

[ColinTaylor]

I have Skynet installed.

Ding, ding, ding.

Looking at the Skynet source code:

https://github.com/Adamm00/IPSet_ASUS/blob/ed4eef6811705a3a748b62714418ebb2280e5617/firewall.sh#L863

 

[Bozdw]

Ding, ding, ding.

Looking at the Skynet source code:

https://github.com/Adamm00/IPSet_ASUS/blob/ed4eef6811705a3a748b62714418ebb2280e5617/firewall.sh#L863

Great job!