Skynet error starting up

[keef]

Hello all

I had Skynet running for a couple of weeks on an Asus RT-AC87U and all was well. Today the ssh session vanished and I started another one. I think foolishly I entered the command below to re-start it.

sh /jffs/scripts/firewall

It gave me the message

Skynet: [INFO] Startup Initiated... ( start )
Whitelisting Shared Domains
ipset v6.32: Error in line 1: Null-valued element, cannot be stored in a hash type of set
Skynet: [Complete] 107647 IPs / 1516 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [22s]

admin@RT-AC87R-26F0:/tmp/home/root#

and I am stuck now. I tried it again with the same result. Do I have to edit or remove line one in the ipset v6.32 file? My Linux experience is pretty shaky.

thanks, Bj

 

[Adamm]

Hello all

I had Skynet running for a couple of weeks on an Asus RT-AC87U and all was well. Today the ssh session vanished and I started another one. I think foolishly I entered the command below to re-start it.

sh /jffs/scripts/firewall

It gave me the message

Skynet: [INFO] Startup Initiated... ( start )
Whitelisting Shared Domains
ipset v6.32: Error in line 1: Null-valued element, cannot be stored in a hash type of set
Skynet: [Complete] 107647 IPs / 1516 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 0 Inbound / 0 Outbound Connections Blocked! [22s]

admin@RT-AC87R-26F0:/tmp/home/root#

and I am stuck now. I tried it again with the same result. Do I have to edit or remove line one in the ipset v6.32 file? My Linux experience is pretty shaky.

thanks, Bj

Can you upload the first few lines of the file (or the whole thing if possible) to something like pastebin so I can assess the issue further? Thanks

(It’s located at /tmp/mint/USBNAMEHERE/skynet/skynet.ipset)

 

[keef]

Hi.

thanks for getting back to me so quickly.

I do not have have the mint directory you indicated. I do have /tmp/mnt/SKYNET/

Under that is myswap.swp and skynet. Under skynet is scripts and skynet.log. There is no USBNAMEHERE directory. I missed something here.

Other than Merlin (current) all I have running on my router is AB-Solution Ad-Blocking.

thanks, Bj

 

[Adamm]

I do not have have the mint directory you indicated. I do have /tmp/mnt/SKYNET/

Under that is myswap.swp and skynet. Under skynet is scripts and skynet.log. There is no USBNAMEHERE directory. I missed something here.

Sorry that was a typo from my phone, you were correct in assuming I implied "mnt".

Also by USBNAMEHERE, I was implying "USB Name Here", in this case you indicated the name is SKYNET.

You are also using the v5.x.x version still, so the file in question will be "/tmp/mnt/SKYNET/scripts/ipset.txt"

Thanks

 

[keef]

Sorry that was a typo from my phone, you were correct in assuming I implied "mnt".

Also by USBNAMEHERE, I was implying "USB Name Here", in this case you indicated the name is SKYNET.

You are also using the v5.x.x version still, so the file in question will be "/tmp/mnt/SKYNET/scripts/ipset.txt"

Thanks

 

[keef]

Well after playing around with vi I finally got the contents copied. If everything is somehow really messed up a re-install is not out of the question. I installed Skynet and AD Blocking on separate drives just in case one may have blown up the other, later to find out they cooperate very well. I have been looking for an excuse to combine them on one drive.


create Whitelist hash:net family inet hashsize 1024 maxelem 65536 comment

add Whitelist 52.94.248.112/28 comment "CDN-Whitelist"

add Whitelist 46.51.216.0/21 comment "CDN-Whitelist"

add Whitelist 52.212.248.0/26 comment "CDN-Whitelist"

add Whitelist 52.94.248.16/28 comment "CDN-Whitelist"

add Whitelist 54.174.0.0/15 comment "CDN-Whitelist"

add Whitelist 94.46.153.0/24 comment "CDN-Whitelist"

add Whitelist 54.228.0.0/16 comment "CDN-Whitelist"

add Whitelist 13.228.0.0/15 comment "CDN-Whitelist"

add Whitelist 52.94.197.0/24 comment "CDN-Whitelist"

add Whitelist 52.95.108.0/23 comment "CDN-Whitelist"

add Whitelist 54.231.248.0/22 comment "CDN-Whitelist"

add Whitelist 54.248.0.0/15 comment "CDN-Whitelist"

add Whitelist 54.239.0.240/28 comment "CDN-Whitelist"

add Whitelist 52.119.176.0/21 comment "CDN-Whitelist"

add Whitelist 54.239.116.0/22 comment "CDN-Whitelist"

add Whitelist 52.94.248.160/28 comment "CDN-Whitelist"

add Whitelist 54.78.0.0/16 comment "CDN-Whitelist"

add Whitelist 52.94.244.0/22 comment "CDN-Whitelist"

add Whitelist 52.95.48.0/22 comment "CDN-Whitelist"

add Whitelist 52.94.198.128/28 comment "CDN-Whitelist"

add Whitelist 10.8.0.0/24 comment "nvram: vpn_server1_sn"

add Whitelist 35.153.0.0/16 comment "CDN-Whitelist"

add Whitelist 52.144.192.64/26 comment "CDN-Whitelist"

add Whitelist 52.84.0.0/15 comment "CDN-Whitelist"

add Whitelist 54.240.228.0/23 comment "CDN-Whitelist"

add Whitelist 23.79.226.0/24 comment "CDN-Whitelist"

add Whitelist 204.246.160.0/22 comment "CDN-Whitelist"

add Whitelist 52.221.221.128/29 comment "CDN-Whitelist"

add Whitelist 52.95.164.0/23 comment "CDN-Whitelist"

add Whitelist 54.150.0.0/16 comment "CDN-Whitelist"

add Whitelist 177.72.240.0/21 comment "CDN-Whitelist"

add Whitelist 52.66.0.0/16 comment "CDN-Whitelist"

add Whitelist 52.95.251.0/24 comment "CDN-Whitelist"

add Whitelist 54.231.232.0/21 comment "CDN-Whitelist"

add Whitelist 52.94.9.0/24 comment "CDN-Whitelist"

add Whitelist 34.212.104.90 comment "Shared-Whitelist: otx.alienvault.com"

add Whitelist 23.79.239.0/24 comment "CDN-Whitelist"

add Whitelist 72.246.199.0/24 comment "CDN-Whitelist"

add Whitelist 52.200.0.0/13 comment "CDN-Whitelist"

add Whitelist 54.231.240.0/22 comment "CDN-Whitelist"

add Whitelist 54.240.196.0/24 comment "CDN-Whitelist"

add Whitelist 2.22.226.0/24 comment "CDN-Whitelist"

add Whitelist 52.94.72.0/22 comment "CDN-Whitelist"

add Whitelist 50.18.0.0/16 comment "CDN-Whitelist"

add Whitelist 52.92.72.0/22 comment "CDN-Whitelist"

add Whitelist 52.93.1.0/24 comment "CDN-Whitelist"

add Whitelist 54.244.0.0/16 comment "CDN-Whitelist"

add Whitelist 52.47.139.0/24 comment "CDN-Whitelist"

add Whitelist 199.193.116.104 comment "Shared-Whitelist: astrill.com"

add Whitelist 52.93.249.0/24 comment "CDN-Whitelist"

add Whitelist 52.95.28.0/24 comment "CDN-Whitelist"

add Whitelist 54.239.1.16/28 comment "CDN-Whitelist"

add Whitelist 52.119.184.0/22 comment "CDN-Whitelist"

add Whitelist 88.221.208.0/24 comment "CDN-Whitelist"

add Whitelist 34.226.14.0/24 comment "CDN-Whitelist"

add Whitelist 103.246.148.0/23 comment "CDN-Whitelist"

add Whitelist 35.157.127.248/29 comment "CDN-Whitelist"

add Whitelist 151.139.19.0/24 comment "CDN-Whitelist"

add Whitelist 205.251.236.0/22 comment "CDN-Whitelist"

add Whitelist 69.16.153.0/24 comment "CDN-Whitelist"

 

[Adamm]

Well after playing around with vi I finally got the contents copied. If everything is somehow really messed up a re-install is not out of the question. I installed Skynet and AD Blocking on separate drives just in case one may have blown up the other, later to find out they cooperate very well. I have been looking for an excuse to combine them on one drive.

Nothing looks out of the ordinary, how often does this error happen or was it just a once off thing? I can't actually find details on the error anywhere on the internet its so unique

In any case, unless it keeps coming back I think you should be okay to leave it be. You may also want to update Skynet to v6.x.x - there were some pretty extensive changes (and in the process change your skynet install location to a unified directory with ab-solution - the install command makes this transition very painless)

 

[keef]

[QUOTE="You may also want to update Skynet to v6.x.x - there were some pretty extensive changes (and in the process change your skynet install location to a unified directory with ab-solution - the install command makes this transition very painless)[/QUOTE]

That sounds like a good idea. I tend to attract oddball errors and I'd rather have Skynet up instead hunting down a weird problem over many, many days.

thanks Adamm

Bj

 

[keef]

Hi. Well, v6 installed fine, good idea to start new and upgrade. It all seems to be working well except for one site - Canadian Tire of all places. If I select a product from a list I always get the error '502 bad gateway'. I have added www.canadiantire.ca to the whitelist still with no luck. If I temporarily disable Skynet it works fine.

How can I get this working? I love CTC.

thanks, Bj

 

[Adamm]

Hi. Well, v6 installed fine, good idea to start new and upgrade. It all seems to be working well except for one site - Canadian Tire of all places. If I select a product from a list I always get the error '502 bad gateway'. I have added www.canadiantire.ca to the whitelist still with no luck. If I temporarily disable Skynet it works fine.

How can I get this working? I love CTC.

thanks, Bj

Unrelated to Skynet, with it disabled I still get a 502 error. Its the website having issues.

 

[keef]

Thanks for the quick reply. I get the opposite results. With Skynet disabled I am successful. Must it is something else here I missed.

thanks, Bj

 

[Adamm]

Thanks for the quick reply. I get the opposite results. With Skynet disabled I am successful. Must it is something else here I missed.

thanks, Bj

The website is up now so they must have had some sort of outage, it isn't blocked by any Skynet default lists (nor would you see the 502 page if it were blocked).

admin@RT-AC86U-2EE8:/tmp/home/root# nslookup canadiantire.ca
Server:    127.0.0.1
Address 1: 127.0.0.1 localhost.localdomain

Name:      canadiantire.ca
Address 1: 205.210.17.179


admin@RT-AC86U-2EE8:/tmp/home/root# firewall stats search ip 205.210.17.179
#!/bin/sh
#############################################################################################################
#                     _____ _                     _             __                      #
#                    / ____| |                   | |           / /                      #
#                   | (___ | | ___   _ _ __   ___| |_  __   __/ /_                      #
#                    \___ \| |/ / | | | '_ \ / _ \ __| \ \ / / '_ \                     #
#                    ____) |   <| |_| | | | |  __/ |_   \ V /| (_) |                    #
#                   |_____/|_|\_\\__, |_| |_|\___|\__|   \_/  \___/                     #
#                                 __/ |                                                 #
#                                |___/                                                  #
#                                                                                     #
## - 23/03/2018 -           Asus Firewall Addition By Adamm v6.0.4                    #
##                   https://github.com/Adamm00/IPSet_ASUS                            #
#############################################################################################################


Debug Data Detected in /tmp/mnt/Elements/skynet/skynet.log - 1.8M
Monitoring From Mar 23 03:22:12 To Mar 24 17:37:30
8139 Block Events Detected
964 Unique IPs
0 Autobans Issued
0 Manual Bans Issued

205.210.17.179 is NOT in set Skynet-Whitelist.
205.210.17.179 is NOT in set Skynet-Blacklist.
205.210.17.179 is NOT in set Skynet-BlockedRanges.