Skynet Skynet - Router Firewall & Security Enhancements

[Zastoff]

Went back to v6.9.2 can`t get rid of "Consolidating Blacklist | curl: option -fsLZ: is unknown" anymore and turned off auto update
Worked before when i added "export PATH=/tmp/mnt/Zastoff/entware/bin:/sbin:/bin:/usr/sbin:/usr/bin:$PATH" to the script, That`s not working either now

Spoiler: Malware Blacklist update

Downloading filter.list | [1s]
Refreshing Whitelists | [10s]
Consolidating Blacklist | curl: option -fsLZ: is unknown
curl: try 'curl --help' for more information
[7s]
Filtering IPv4 Addresses | [6s]
Filtering IPv4 Ranges | [0s]
Applying New Blacklist | [11s]
Refreshing AiProtect Bans | [1s]
Saving Changes | [5s]

For Whitelisting Assistance -
https://www.snbforums.com/threads/r...wall-security-enhancements.16798/#post-115872
--*

=============================================================================================================


[#] 143177 IPs (+0) -- 1627 Ranges Banned (+0) || 8 Inbound -- 0 Outbound Connections Blocked! [banmalware] [44s]

 

[dave14305]

Went back to v6.9.2 can`t get rid of "Consolidating Blacklist | curl: option -fsLZ: is unknown" anymore and turned off auto update
Worked before when i added "export PATH=/tmp/mnt/Zastoff/entware/bin:/sbin:/bin:/usr/sbin:/usr/bin:$PATH" to the script, That`s not working either now

Spoiler: Malware Blacklist update

Downloading filter.list | [1s]
Refreshing Whitelists | [10s]
Consolidating Blacklist | curl: option -fsLZ: is unknown
curl: try 'curl --help' for more information
[7s]
Filtering IPv4 Addresses | [6s]
Filtering IPv4 Ranges | [0s]
Applying New Blacklist | [11s]
Refreshing AiProtect Bans | [1s]
Saving Changes | [5s]

For Whitelisting Assistance -
https://www.snbforums.com/threads/r...wall-security-enhancements.16798/#post-115872
--*

=============================================================================================================


[#] 143177 IPs (+0) -- 1627 Ranges Banned (+0) || 8 Inbound -- 0 Outbound Connections Blocked! [banmalware] [44s]

Do you have 7.0.2 version now? Several fixes pushed in the last couple hours.

 

[dave14305]

FWIW we added the path var around two years ago because I vaguely remember a specific stripped down busybox binary acting differently then the full entware version (it also makes development easier so I don't accidentally use non supported flags).

I wonder if this will come back to bite us old curlers. Seems maybe due to find command?

https://github.com/Adamm00/IPSet_ASUS/commit/1de282b5b20579c85a3e226c82ad2c9546ab33d1

 

[Zastoff]

Do you have 7.0.2 version now? Several fixes pushed in the last couple hours.

Have not tested the 7.0.2 did the roll back just before that release

 

[dave14305]

Have not tested the 7.0.2 did the roll back just before that release

It’s Saturday before Christmas, what else have you to do?

 

[Andy1932]

I'm still getting this with 7.0.2.

Downloading filter.list | [0s]
Refreshing Whitelists | [3s]
Consolidating Blacklist | curl: option -fsLZ: is unknown
curl: try 'curl --help' for more information
[0s]
[*] List Content Error Detected - Stopping Banmalware

 

[Adamm]

I wonder if this will come back to bite us old curlers. Seems maybe due to find command?

https://github.com/Adamm00/IPSet_ASUS/commit/1de282b5b20579c85a3e226c82ad2c9546ab33d1

That's where I traced it back to last night but I couldn't see (atleast with modern versions) what the issue may have been when comparing the two binaries.

 

[Adamm]

I'm still getting this with 7.0.2.

Whats the output of;

/opt/bin/curl --version

(I assume you are using entware if you chose not to update your firmware version to alternatively correct the issue)

 

[Zastoff]

Gave 7.02 a try same thing "Consolidating Blacklist | curl: option -fsLZ: is unknown"

RT-AC87U-99F8:/tmp/home/root# /usr/sbin/curl --version
curl 7.65.3 (arm-unknown-linux-gnu) libcurl/7.65.3 OpenSSL/1.0.2t zlib/1.2.5
Release-Date: 2019-07-19
Protocols: file ftp ftps http https imap imaps pop3 pop3s rtsp smb smbs smtp smtps tftp
Features: HTTPS-proxy IPv6 Largefile libz NTLM NTLM_WB SSL TLS-SRP UnixSockets

RT-AC87U-99F8:/tmp/home/root# /opt/bin/curl --version
curl 7.66.0 (arm-openwrt-linux-gnu) libcurl/7.66.0 OpenSSL/1.1.1d zlib/1.2.11
Release-Date: 2019-09-11
Protocols: file ftp ftps http https imap imaps pop3 pop3s rtsp smtp smtps tftp
Features: HTTPS-proxy IPv6 Largefile libz SSL

 

[Andy1932]

Whats the output of;

/usr/sbin/curl --version

(I assume you are using entware if you chose not to update your firmware version to alternatively correct the issue)

I'm not totally against updating to .14, I just had some stability issues with it.

curl 7.65.3 (arm-buildroot-linux-gnueabi) libcurl/7.65.3 OpenSSL/1.0.2s
Release-Date: 2019-07-19
Protocols: file ftp ftps http https imap imaps pop3 pop3s rtsp smb smbs smtp smtps tftp
Features: HTTPS-proxy IPv6 Largefile NTLM NTLM_WB SSL TLS-SRP UnixSockets

 

[Adamm]

I'm not totally against updating to .14, I just had some stability issues with it.

Just realized I pasted the wrong version check, but the last thing I can think of is your entware curl version hasn't been updated;

opkg update
opkg upgrade curl
/opt/bin/curl --version

 

[Adamm]

Gave 7.02 a try same thing "Consolidating Blacklist | curl: option -fsLZ: is unknown"

RT-AC87U-99F8:/tmp/home/root# /usr/sbin/curl --version
curl 7.65.3 (arm-unknown-linux-gnu) libcurl/7.65.3 OpenSSL/1.0.2t zlib/1.2.5
Release-Date: 2019-07-19
Protocols: file ftp ftps http https imap imaps pop3 pop3s rtsp smb smbs smtp smtps tftp
Features: HTTPS-proxy IPv6 Largefile libz NTLM NTLM_WB SSL TLS-SRP UnixSockets

RT-AC87U-99F8:/tmp/home/root# /opt/bin/curl --version
curl 7.66.0 (arm-openwrt-linux-gnu) libcurl/7.66.0 OpenSSL/1.1.1d zlib/1.2.11
Release-Date: 2019-09-11
Protocols: file ftp ftps http https imap imaps pop3 pop3s rtsp smtp smtps tftp
Features: HTTPS-proxy IPv6 Largefile libz SSL

Try the same steps posted above, if that doesn't work the only option I see left is your $PATH binary isn't the default entware one.

Assuming it still doesn't work whats the output of;

echo $PATH

 

[Andy1932]

curl 7.66.0 (aarch64-openwrt-linux-gnu) libcurl/7.66.0 OpenSSL/1.1.1d zlib/1.2.11
Release-Date: 2019-09-11


Downloading filter.list | [1s]
Refreshing Whitelists | [2s]
Consolidating Blacklist | curl: option -fsLZ: is unknown
curl: try 'curl --help' for more information
[0s]
[*] List Content Error Detected - Stopping Banmalware

 

[Adamm]

curl 7.66.0 (aarch64-openwrt-linux-gnu) libcurl/7.66.0 OpenSSL/1.1.1d zlib/1.2.11
Release-Date: 2019-09-11


Downloading filter.list | [1s]
Refreshing Whitelists | [2s]
Consolidating Blacklist | curl: option -fsLZ: is unknown
curl: try 'curl --help' for more information
[0s]
[*] List Content Error Detected - Stopping Banmalware

Whats the output of;

echo $PATH

 

[Andy1932]

Whats the output of;

echo $PATH

/opt/bin:/opt/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/home/admin:/mmc/sbin:/mmc/bin:/mmc/usr/sbin:/mmc/usr/bin:/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin

 

[Zastoff]

Try the same steps posted above, if that doesn't work the only option I see left is your $PATH binary isn't the default entware one.

Assuming it still doesn't work whats the output of;

echo $PATH

/opt/bin:/opt/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/home/drizzt:/mmc/sbin:/mmc/bin:/mmc/usr/sbin:/mmc/usr/bin:/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin

 

[Adamm]

/opt/bin:/opt/sbin:/bin:/usr/bin:/sbin:/usr/sbin:/home/drizzt:/mmc/sbin:/mmc/bin:/mmc/usr/sbin:/mmc/usr/bin:/opt/sbin:/opt/bin:/opt/usr/sbin:/opt/usr/bin

I'm going to have to sleep on this one and approach it on a clear head , makes no logical sense to me why its failing to use the entware binaries from all the information you both provided.

Thanks for the information, sorry I couldn't provide a solution just yet beyond downgrade and wait for a firmware update to natively correct the issue.

 

[Jack Yaz]

I'm going to have to sleep on this one and approach it on a clear head , makes no logical sense to me why its failing to use the entware binaries from all the information you both provided.

Thanks for the information, sorry I couldn't provide a solution just yet beyond downgrade and wait for a firmware update to natively correct the issue.

could you not detect if curl is present in entware and call it like i do for sqlite?

[ -f /opt/bin/sqlite3 ] && SQLITE3_PATH=/opt/bin/sqlite3 || SQLITE3_PATH=/usr/sbin/sqlite3

 

[Andy1932]

I just went ahead and updated to 384.14. All working now.

 

[Marin]

Fixed it by changing default font type.

I did this but no luck. Would you be willing share your font type and size settings? I am still on UTF-8. Not sure why I can't get this to work right.
Thank you!