Skynet Router Firewall + Skynet Firewall?

[randomName]

Is the router firmware firewall necessary if Skynet is being used?

 

[Tech9]

Yes. Skynet is not firewall replacement script.

 

[randomName]

Thank you, and thanks for the reply

 

[Tech9]

Your router's firewall drops all unsolicited inbound connections. If you have no open ports and you have no intentions to block outbound connections (or limit yourself), you don't need Skynet. It was discussed not long ago what Skynet is useful for. It's a firewall enhancement script, in case you need something extra and you know what are you doing.

Skynet - Skynet noob question: Is this amount of inbound blocks normal?

I'm sure questions like these get asked all the time, but I got nervous from what I saw in Skynet, and couldn't find anything concrete when searching the forums. I installed Skynet yesterday, and noticed that in just a few hours I had 1700 inbound blocks, I accidentally reset the key stat...

www.snbforums.com

 

[randomName]

Your router's firewall drops all unsolicited inbound connections. If you have no open ports and you have no intentions to block outbound connections (or limit yourself), you don't need Skynet. It was discussed not long ago what Skynet is useful for. It's a firewall enhancement script, in case you need something extra and you know what are you doing.

Skynet - Skynet noob question: Is this amount of inbound blocks normal?

I'm sure questions like these get asked all the time, but I got nervous from what I saw in Skynet, and couldn't find anything concrete when searching the forums. I installed Skynet yesterday, and noticed that in just a few hours I had 1700 inbound blocks, I accidentally reset the key stat...

www.snbforums.com

Thank you, I didn't know that

 

[Tech9]

You're welcome. Here is the information from the developer, if you want to learn more:

GitHub - Adamm00/IPSet_ASUS: Skynet - Advanced IP Blocking For ASUS Routers Using IPSet.

Skynet - Advanced IP Blocking For ASUS Routers Using IPSet. - Adamm00/IPSet_ASUS

github.com

It's an excellent script, but requires some knowledge how things work. I personally found few issues with default Skynet configuration:
- it logs connections the firewall would have dropped anyway, making you believe you're under attack and Skynet is working hard to protect you
- community supported blocklists may/will contain false positives, issues were reported on SNB; you have to monitor Skynet and act accordingly

 

[SomeWhereOverTheRainBow]

Is the router firmware firewall necessary if Skynet is being used?

IF you are looking for another security method and feeling experimental,

There is always

Suricata - Suricata - IDS on AsusWRT Merlin

Suricata is a free and open source, mature, fast and robust network threat detection engine. The Suricata engine is capable of real time intrusion detection (IDS), inline intrusion prevention (IPS), network security monitoring (NSM) and offline pcap processing. Suricata inspects the network...

www.snbforums.com

[Experimental] Snort3 IDS/IPS on AsusMerlin [AC86/AX88 routers ONLY]

What is Snort? It is an open source intrusion prevention system (IPS) capable of real-time traffic analysis and packet logging. Snort is an open source project under Gnu Public License (GPL) 2.0, it is an open source alternative to some of the proprietary IDS/IPS such as TrendMicro's AiProtect...

www.snbforums.com

However, I do not recommend these routes unless you absolutely know what you are doing as they are pretty router intensive.