Skynet Skynet filter list issue - [*] List Content Error Detected - Stopping Banmalware

[Marcus Yansen]

Hi, I am new to skynet, running the latest version and on asus merlin fw AX88U Pro firmware 3006.102.5_alpha2-ge1d67cafe4
I only have skynet installed.
I tried changing the filter list to this one, by choosing option 3 for banmalware, and then option 2 for change filter list and typing in this: https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/myfilter.list and then I receieved the error below in bold (even when I try to update block list). Then I tried changing back to the default list by typing this: https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/refs/heads/master/filter.list (same error as below). What am I doing wrong? Thank you

Custom Filter Detected: https://raw.githubusercontent.com/jumpsmm7/GeneratedAdblock/master/myfilter.list
Downloading filter.list | [1s]
Refreshing Whitelists | [3s]
Consolidating Blacklist | [0s]
[*] List Content Error Detected - Stopping Banmalware

=============================================================================================================

[#] 26608 IPs (+0) -- 2261 Ranges Banned (+0) || 5828 Inbound -- 0 Outbound Connections Blocked! [banmalware] [4s]'

Also, here is a debug output, if it is helpful at all, I removed my device names and macaddresses as a precaution

# #
# Router Firewall And Security Enhancements #
# By Adamm - https://github.com/Adamm00/IPSet_ASUS #
# 30/12/2024 - v7.6.4 #
#############################################################################################################
Router Model; RT-AX88U_Pro
Skynet Version; v7.6.4 (30/12/2024) (a34f2e22a26a7acea315fd8ea38c4d27)
iptables v1.4.15 - (eth0 @ 192.168.50.1)
ipset v7.6, protocol version: 7
IP Address; (192.168.2.5)
FW Version; 102.5_alpha2-ge1d67cafe4 (Jun 30 2025) (4.19.183)
Install Dir; /tmp/mnt/amtmm/skynet (867.2G / 915.9G Space Available)
SWAP File; /tmp/mnt/amtmm/myswap.swp (2.0G)
Syslog Location; (/jffs/syslog.log) (/jffs/syslog.log-1)
Uptime; 1 days, 4 hours, 37 minutes.
Ram Available; (405M / 994M)

--------------- | ------------ | --------------- | ----------
| Device Name | | | Local IP | | | MAC Address | | | Status |
--------------- | ------------ | --------------- | ----------

Sagemcom Broadband SAS | 192.168.2.1 | | Online
| 192.168.50.16 | | Inactive
| 192.168.50.35 | | Online
| 192.168.50.46 | | Inactive
| 192.168.50.57 | | Online
| 192.168.50.230 | | Online
| 192.168.50.237 | | Inactive
| 192.168.50.245 | | Online


-------------------- | ----------
| Test Description | | | Result |
-------------------- | ----------

Internet-Connectivity | [Passed]
Public IP Address | [Passed]
Write Permission | [Passed]
Config File | [Passed]
Firewall-Start Entry | [Passed]
Services-Stop Entry | [Passed]
Service-Event Entry | [Passed]
Profile.add Entry | [Passed]
SWAP File | [Passed]
Cron Jobs | [Passed]
NTP Sync | [Passed]
Log Level 5 Settings | [Passed]
Duplicate Rules In RAW | [Passed]
IPSets | [Passed]
IPTables Rules | [Passed]
Local WebUI Files | [Passed]
Mounted WebUI Files | [Passed]
MenuTree.js Entry | [Passed]


----------- | ----------
| Setting | | | Status |
---------- | ----------

Skynet Auto-Updates | [Enabled]
Malware List Auto-Updates | [Enabled]
Logging | [Enabled]
Filter Traffic | [Enabled]
Unban PrivateIP | [Enabled]
Log Invalid Packets | [Disabled]
Import AiProtect Data | [Enabled]
Secure Mode | [Enabled]
Fast Switch List | [Disabled]
Syslog Location | [Default]
IOT Blocking | [Disabled]
IOT Logging | [Enabled]
Country Lookup For Stats | [Enabled]
CDN Whitelisting | [Enabled]
Display WebUI | [Enabled]

18/18 Tests Sucessful


################################################
## Generated By Skynet - Do Not Manually Edit ##
## Jul 13 09:21:03 ##

## Installer ##
model="RT-AX88U_Pro"
localver="v7.6.4"
autoupdate="enabled"
banmalwareupdate="daily"
forcebanmalwareupdate=""
logmode="enabled"
filtertraffic="all"
swaplocation="/tmp/mnt/amtmm/myswap.swp"

## Counters / Lists ##
blacklist1count="26609"
blacklist2count="2261"
customlisturl=""
customlist2url=""
countrylist=""
excludelists=""

## Settings ##
unbanprivateip="enabled"
loginvalid="disabled"
banaiprotect="enabled"
securemode="enabled"
extendedstats="disabled"
fastswitch="disabled"
syslogloc="/jffs/syslog.log"
syslog1loc="/jffs/syslog.log-1"
iotblocked="disabled"
iotlogging="enabled"
iotports=""
iotproto="udp"
lookupcountry="enabled"
cdnwhitelist="enabled"
displaywebui="enabled"

################################################

=============================================================================================================

[#] 26609 IPs (+0) -- 2261 Ranges Banned (+0) || 36 Inbound -- 0 Outbound Connections Blocked! [debug] [1s]

 

[Viktor Jaep]

@SomeWhereOverTheRainBow and I built this Skynet Filter Validator script to further troubleshoot lists, and ensure each of their sources checks out as valid. I would suggest giving this a try?

Skynet - Filter Validator v0.7 - Skynet Firewall Filter List IPv4 Integrity Validator

Filter Validator v0.7 A collaborative project between @Viktor Jaep and @SomeWhereOverTheRainBow! Filter Validator tests the IPv4 addresses (and IPv6 if present) on a given filter list that are to be used with the Skynet Firewall running on Asus-Merlin Firmware in order to block...

www.snbforums.com

 

[Marcus Yansen]

@SomeWhereOverTheRainBow and I built this Skynet Filter Validator script to further troubleshoot lists, and ensure each of their sources checks out as valid. I would suggest giving this a try?

Skynet - Filter Validator v0.7 - Skynet Firewall Filter List IPv4 Integrity Validator

Filter Validator v0.7 A collaborative project between @Viktor Jaep and @SomeWhereOverTheRainBow! Filter Validator tests the IPv4 addresses (and IPv6 if present) on a given filter list that are to be used with the Skynet Firewall running on Asus-Merlin Firmware in order to block...

www.snbforums.com

Thank you for this great tool. I ran it, everything comes clean, i.e., no reds. Maybe an uninstall and re-install of skynet is in order? I guess I would uninstall, then reboot router, then re-install and test?
I am even having this issue with the default skynet list...updating it gives the same error.
I installed and ran the disk utility script, afte rebooting i checked the log and no issues were found with my disk.

Perhaps I will post in adma's github, because on the skynet thread first page, that's what he says to do if you are having issues.

 

[Viktor Jaep]

Thank you for this great tool. I ran it, everything comes clean, i.e., no reds. Maybe an uninstall and re-install of skynet is in order? I guess I would uninstall, then reboot router, then re-install and test?
I am even having this issue with the default skynet list...updating it gives the same error.
I installed and ran the disk utility script, afte rebooting i checked the log and no issues were found with my disk.

Perhaps I will post in adma's github, because on the skynet thread first page, that's what he says to do if you are having issues.

I would first try an uninstall, reboot, reinstall... then try the blocklist again?

 

[Marcus Yansen]

I would first try an uninstall, reboot, reinstall... then try the blocklist again?

Unfortunately same error again. So I posted in github. Will post my solution here too when I find it.

 

[Viktor Jaep]

Unfortunately same error again. So I posted in github. Will post my solution here too when I find it.

According to the code, this piece checks to ensure all IP addresses are formatted correctly, and if not, issue the "Stopping Banmalware" error message.

        if ! grep -qE '^(((25[0-5]|(2[0-4]|1[0-9]|[1-9]|)[0-9])\.){3}(25[0-5]|(2[0-4]|1[0-9]|[1-9]|)[0-9])(\/(1?[0-9]|2?[0-9]|3?[0-2]))?)$' "${skynetloc}"/lists/* 2>/dev/null; then
            result="$(Red "[$(($(date +%s) - btime))s]")"
            printf '%-8s\n' "$result"
            printf '%-35s\n' "[*] List Content Error Detected - Stopping Banmalware"
            nocfg="1"
            result="1"
        fi

Why not try this... first, uninstall Skynet. Then, make sure the actual folder has been deleted under your USB drive. It could be just re-using your old filter lists. It should be located here:

/tmp/mnt/<name of your usb drive>
ex: /tmp/mnt/ASUS-SSD

If you still see a 'skynet' folder in this location even after an uninstall, try this:

rm -rf /tmp/mnt/<name of your usb drive>/skynet

 

[Marcus Yansen]

According to the code, this piece checks to ensure all IP addresses are formatted correctly, and if not, issue the "Stopping Banmalware" error message.

        if ! grep -qE '^(((25[0-5]|(2[0-4]|1[0-9]|[1-9]|)[0-9])\.){3}(25[0-5]|(2[0-4]|1[0-9]|[1-9]|)[0-9])(\/(1?[0-9]|2?[0-9]|3?[0-2]))?)$' "${skynetloc}"/lists/* 2>/dev/null; then
            result="$(Red "[$(($(date +%s) - btime))s]")"
            printf '%-8s\n' "$result"
            printf '%-35s\n' "[*] List Content Error Detected - Stopping Banmalware"
            nocfg="1"
            result="1"
        fi

Why not try this... first, uninstall Skynet. Then, make sure the actual folder has been deleted under your USB drive. It could be just re-using your old filter lists. It should be located here:

/tmp/mnt/<name of your usb drive>
ex: /tmp/mnt/ASUS-SSD

If you still see a 'skynet' folder in this location even after an uninstall, try this:

rm -rf /tmp/mnt/<name of your usb drive>/skynet

Ok I am bad at this, what are the basic commands to use when I ssh into router, like to list directories, or cd to a directory..i am familiar with cmd commands but not commands after I ssh

 

[Viktor Jaep]

Ok I am bad at this, what are the basic commands to use when I ssh into router, like to list directories, or cd to a directory..i am familiar with cmd commands but not commands after I ssh

Happy to help... Make sure you try uninstalling Skynet first... then try this:

cd /tmp/mnt

ls

(look for the name of your USB drive)

cd <name of your USB drive>

ls

(look to see if skynet is in this list, if so:)

rm -rf /tmp/mnt/<name of your usb drive>/skynet

 

[Marcus Yansen]

Thank you, it doesn't seem to be! There seems to be some folder called lost+found? (amtmm is the label of my drive, what i labelled it, i look at the directories in both mnt and amtmm as reflected in my output below. I did this after uninstalling skynet through skynet's own app in amtmm.

@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm# cd /tmp/mnt
@RT-AX88U_Pro-F4A0:/tmp/mnt# ls
amtmm defaults nvram
@RT-AX88U_Pro-F4A0:/tmp/mnt# cd amtmm
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm# ls
lost+found
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm#

 

[Viktor Jaep]

Thank you, it doesn't seem to be! There seems to be some folder called lost+found? (amtmm is the label of my drive, what i labelled it, i look at the directories in both mnt and amtmm as reflected in my output below. I did this after uninstalling skynet through skynet's own app in amtmm.

@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm# cd /tmp/mnt
@RT-AX88U_Pro-F4A0:/tmp/mnt# ls
amtmm defaults nvram
@RT-AX88U_Pro-F4A0:/tmp/mnt# cd amtmm
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm# ls
lost+found
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm#

Yep, looks like it's removed completely.

I know it's not a requirement of Skynet, but having entware installed is probably not a bad idea. You never know... perhaps some tool might be needed to ensure operations run smoothly. You can install that directly from AMTM.

The other issue you could be facing is external USB drive corruption. Make sure you have enabled that "Disk check script" under AMTM... then when you reboot, it will check your USB drive... check the "dcl" log and see if it had to fix anything?

 

[Marcus Yansen]

Yep, looks like it's removed completely.

I know it's not a requirement of Skynet, but having entware installed is probably not a bad idea. You never know... perhaps some tool might be needed to ensure operations run smoothly. You can install that directly from AMTM.

View attachment 66655

The other issue you could be facing is external USB drive corruption. Make sure you have enabled that "Disk check script" under AMTM... then when you reboot, it will check your USB drive... check the "dcl" log and see if it had to fix anything?

View attachment 66654

Thank you so much for your help.
disk check log seems to come clean. Now I will proceed to installing entware.

Sun Jul 13 10:58:55 GMT 2025 Waited 3s for NTP to sync date
Sun Jul 13 10:58:55 GMT 2025 Probing 'ext4' on device /dev/sda1
Running disk check with command 'e2fsck -p' on /dev/sda1
amtmm: clean, 35/61054976 files, 4639121/244190000 blocks
Sun Jul 13 10:58:55 GMT 2025 Disk check done on /dev/sda1

Sun Jul 13 12:56:42 GMT 2025 Waited 1s for NTP to sync date
Sun Jul 13 12:56:42 GMT 2025 Probing 'ext4' on device /dev/sda1
Running disk check with command 'e2fsck -p' on /dev/sda1
amtmm: clean, 17/61054976 files, 4112471/244190000 blocks
Sun Jul 13 12:56:42 GMT 2025 Disk check done on /dev/sda1

Sun Jul 13 13:08:19 GMT 2025 Probing 'ext4' on device /dev/sda1
Running disk check with command 'e2fsck -p' on /dev/sda1
amtmm: clean, 17/61054976 files, 4112471/244190000 blocks
Sun Jul 13 13:08:19 GMT 2025 Disk check done on /dev/sda1

Sun Jul 13 13:50:26 GMT 2025 Waited 1s for NTP to sync date
Sun Jul 13 13:50:26 GMT 2025 Probing 'ext4' on device /dev/sda1
Running disk check with command 'e2fsck -p' on /dev/sda1
amtmm: clean, 17/61054976 files, 4112471/244190000 blocks
Sun Jul 13 13:50:26 GMT 2025 Disk check done on /dev/sda1

 

[Marcus Yansen]

Issue persists even after installing entware...

 

[Viktor Jaep]

Issue persists even after installing entware...

Wow, you've got a good one there.

Have you tried a different blocklist? I know neither @SomeWhereOverTheRainBow's or the built-in one should not give you errors... but perhaps give mine a quick go and see if it makes any difference?

https://raw.githubusercontent.com/ViktorJp/Skynet/refs/heads/main/filter.list

 

[Marcus Yansen]

Wow, you've got a good one there.

Have you tried a different blocklist? I know neither @SomeWhereOverTheRainBow's or the built-in one should not give you errors... but perhaps give mine a quick go and see if it makes any difference?

https://raw.githubusercontent.com/ViktorJp/Skynet/refs/heads/main/filter.list

Tried same issue. but this happens even right after i install skynet, and just try to update the default playlist to begin with...

 

[dave14305]

Tried same issue. but this happens even right after i install skynet, and just try to update the default playlist to begin with...

After it fails, see what is left in the directory. Any zero byte files?

cd /tmp/mnt/amtmm/skynet/lists
ls -l

 

[Marcus Yansen]

After it fails, see what is left in the directory. Any zero byte files?

cd /tmp/mnt/amtmm/skynet/lists
ls -l

Does this show nothing at all in that directory? isn't that odd as I assume there should be some files there?

@RT-AX88U_Pro-F4A0:/tmp/home/root# cd /tmp/mnt/amtmm/skynet/lists
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists# ls
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists# ls -l
@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists#

 

[dave14305]

Does this show nothing at all in that directory? isn't that odd as I assume there should be some files there?

Can you successfully download the list of lists?

curl https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/refs/heads/master/filter.list

 

[Marcus Yansen]

where exactly do i type this command for downloading the list - when i ssh into the router? (curl https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/refs/heads/master/filter.list)

or do you mean i should change the filter list by pasting in this url for the custom filter in the skynet app?

 

[dave14305]

where exactly do i type this command for downloading the list - when i ssh into the router? (curl https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/refs/heads/master/filter.list)

or do you mean i should change the filter list by pasting in this url for the custom filter in the skynet app?

Just run that command in the ssh session to test connectivity.

 

[Marcus Yansen]

successful

@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists# curl https://raw.githubusercontent.com/Adamm00/IPSet_ASUS/refs/he
ads/master/filter.list

https://iplists.firehol.org/files/bds_atif.ipset

https://iplists.firehol.org/files/cybercrime.ipset

https://iplists.firehol.org/files/dyndns_ponmocup.ipset

https://iplists.firehol.org/files/et_block.netset

https://iplists.firehol.org/files/et_compromised.ipset

https://iplists.firehol.org/files/firehol_level2.netset

https://iplists.firehol.org/files/firehol_level3.netset

https://iplists.firehol.org/files/spamhaus_drop.netsethomenet@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists#

@RT-AX88U_Pro-F4A0:/tmp/mnt/amtmm/skynet/lists#