Skynet Skynet - Router Firewall & Security Enhancements
Adamm
Part of the Furniture
That output indicates the IP was not whitelisted (which would prevent it getting Blacklisted in the first place). It also indicates that it was banned manually as autobans don't have Blacklist reasons.
To whitelist this IP use the following command;
Code:
sh /jffs/scripts/firewall whitelist ip 168.1.79.229 GetflixAdamm
Part of the Furniture
This script is intended for IPv4 usage.
Thanks for the reply Adam. Agree that the output indicates that its not in the whitelist but prior to the issue reoccurring it was.
When i have the problem i have to manually recreate the whitelist entry to be able to restore service. I have the following command stored in a text file that i use to restore service..
/jffs/scripts/firewall whitelist ip 168.1.79.229
The results are:
Whitelisting 168.1.79.229
ipset v6.32: Comment cannot be used: set was created without comment support
Saving Changes
The problem i'm having is its not a permanent fix and i have to do it about once a day. Any thoughts?
Adamm
Part of the Furniture
Okay that makes more sense. It seems your whitelist (and possibly blacklist) do not support comments, the only way I can see this happening is if you updated from a much older version of Skynet to a current one thus missing the update code that was present for a few months (although this is a failure more on my behalf). Try the following commands;
Code:
sh /jffs/scripts/firewall disable
sed -i 's/create Blacklist.*[0-9]$/& comment/' /jffs/scripts/ipset.txt # Convert IPSets
sed -i 's/create BlockedRanges.*[0-9]$/& comment/' /jffs/scripts/ipset.txt # Convert IPSets
sed -i 's/create Whitelist.*[0-9]$/& comment/' /jffs/scripts/ipset.txt # Convert IPSets
sh /jffs/scripts/firewall restartAfter Skynet restarts you should stop seeing that error and entries will actually start getting added when you issue the commands.
Adamm
Part of the Furniture
As promised I've added the desired functionality in v5.5.6. Skynet will now remember any custom URL (and use it for autoupdates) until you "reset" back to the default one via;
Code:
sh /jffs/scripts/firewall banmalware resetThis only applies to you @MacG32, issue the following commands first;
Code:
sed -i '\~banmalwarecustom~d' "/jffs/scripts/firewall-start"
cru d Skynet_banmalwarecustomThat will remove the temporary fix I mentioned previously as its no longer needed.
Thanks Adam. i appreciate your help. All the above commands appeared to apply successfully but I still get the same comment warning.
sh /jffs/scripts/firewall whitelist ip 168.1.79.229 getflix
Whitelisting 168.1.79.229
ipset v6.32: Comment cannot be used: set was created without comment support
Saving Changes
Skynet: [Complete] 0 IPs / 0 Ranges Banned. -1 New IPs / 0 New Ranges Banned. Inbound / Outbound Connections Blocked! [1s]
Taking your comment into consideration about updating from an older version. i uninstalled/reinstalled to v5.5.6 to usb.
The results look the same.
sh /jffs/scripts/firewall whitelist ip 168.1.79.229 getflix
Whitelisting 168.1.79.229
ipset v6.32: Comment cannot be used: set was created without comment support
Saving Changes
Skynet: [Complete] 0 IPs / 0 Ranges Banned. -4 New IPs / 0 New Ranges Banned. Inbound / Outbound Connections Blocked! [0s]
Could it be that the whilelist is not getting created?
I have noticed that there is a /jffs/shared-Skynet2-whitelist but there is only a number of domain names listed. no IP addresses. Is there any other files i should be looking at?
admin@RT-AC88U-9778:/tmp/home/root# ipset -L -t
Name: Whitelist
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 372
References: 6
Number of entries: 1
Name: Blacklist
Type: hash:ip
Revision: 4
Header: family inet hashsize 1024 maxelem 65536 timeout 604800
Size in memory: 2412
References: 3
Number of entries: 43
Name: privacy-filter_ipv4
Type: hash:ip
Revision: 4
Header: family inet hashsize 65536 maxelem 131072
Size in memory: 2060
References: 1
Number of entries: 50
Name: malware-filter_ipv4
Type: hash:ip
Revision: 4
Header: family inet hashsize 65536 maxelem 131072
Size in memory: 1281500
References: 1
Number of entries: 44044
Name: malware-filter_ipv4_range
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 65536
Size in memory: 316
References: 1
Number of entries: 0
Name: BlockedRanges
Type: hash:net
Revision: 6
Header: family inet hashsize 1024 maxelem 65536 comment
Size in memory: 316
References: 1
Number of entries: 0
Name: Skynet
Type: list:set
Revision: 3
Header: size 8
Size in memory: 92
References: 5
Number of entries: 2
..........................................................................
Router Model; RT-AC88U
Skynet Version; v5.5.6 (29/11/2017)
iptables v1.4.14 - (ppp0 @ 192.168.1.1)
ipset v6.32, protocol version: 6
FW Version; 380.68_4 (Oct 4 2017) (2.6.36.4brcmarm)
Install Dir; /tmp/mnt/sda1/skynet (1.6G / 1.9G Space Available)
Boot Args; /jffs/scripts/firewall start debug banmalware autoupdate usb=/tmp/mnt/sda1
No Lock File Found
Checking Install Directory Write Permissions... [Passed]
Checking Firewall-Start Entry... [Passed]
Checking OpenVPN-Event Entry... [Passed]
Checking Services-Stop Entry... [Passed]
Checking CronJobs... [Passed]
Checking IPSet Comment Support... [Passed]
Checking Log Level 6 Settings... [Passed]
Checking Autobanning Status... [Passed]
Checking Debug Mode Status... [Passed]
Checking For Duplicate Rules In RAW... [Passed]
Checking For Duplicate Rules In Filter... [Passed]
Checking Skynet IPTable... [Passed]
Checking Whitelist IPSet... [Passed]
Checking BlockedRanges IPSet... [Passed]
Checking Blacklist IPSet... [Passed]
Checking Skynet IPSet... [Passed]
Skynet: [Complete] 34 IPs / 0 Ranges Banned. 0 New IPs / 0 New Ranges Banned. 18 Inbound / 0 Outbound Connections Blocked! [1s]
MacG32
Regular Contributor
I'm running in to what I think are problems. Whenever I Install Skynet / Change Boot Options my router restarts by itself. When I forced an update my router restarted by itself. I lost the ranges banned but kept the IPs banned. I went to input the custom list in Banmalware and while it was working on the list my router restarted by itself. I manually restarted it and attempted to input the custom list and all went well. It's running alright now. I was poking around cru l and didn't see a cron job to update the custom list. There are an update and save jobs listed.
Adamm
Part of the Furniture
If the router is indeed rebooting by itself, that could be due to a kernel panic. There's only one situation where Skynet would need a reboot during initial install, and if that was the case it actually asks for the users consent first.
I'd check your syslog after these reboots and see if there's any indication of what's going on.
MacG32
Regular Contributor
There's nothing listed in the logs about rebooting or even errors. It's just like when I power it back on after I turn it off. I did get some kind of an error, but it happened while it was running. https://pastebin.com/CC3MHUPf I posted this in the Alpha thread. Never seen anything like it before.
Last edited:
Butterfly Bones
Very Senior Member
edit - and of course I find the command as soon as I ask here.
Adamm
Part of the Furniture
Yeah this definitely looks like more of a firmware error, first time I've seen it. I'd wait for RMerlins reply and/or possibly reflash the latest firmware w/ factory restore.
The scripts that i'm running in addition to skynet..
Adblocking
ban malicious IPS - Martineau, v3.04
#https://www.snbforums.com/threads/h...cious-ips-using-ipset-firewall-addition.16798
privacy filter
#https://github.com/RMerl/asuswrt-merlin/wiki/Using-ipset#privacy-filter
malware-filter
#https://github.com/RMerl/asuswrt-merlin/wiki/Ipset-script-installation-instructions#malware-filter
Adamm
Part of the Furniture
well, since I've enabled the "Debug Mode via the installer" the DNS(Crypt) issue I had is gone. I've done nothing else but just enabled the Debug Mode. Cool.
There seems to be an issue with rights and banmalware updating?
this started happening since ab-solution closes off like below?
Is there a conflict somewhere?
Code:
Downloading filter.list [0s]
Whitelisting Shared Domains [3s]
Consolidating Blacklist [12s]
Saving Changes Removing Previous Malware Bans sed: can't create temp file '/tmp/mnt/AB-Solution/skynet/scripts/ipset.txt3bpIxv': Read-only file system
[6s]
Filtering IPv4 Addresses /opt/bin/firewall: line 2325: can't create /tmp/mnt/AB-Solution/skynet/scripts/ipset.txt: Read-only file system
Filtering IPv4 Ranges /opt/bin/firewall: line 2325: can't create /tmp/mnt/AB-Solution/skynet/scripts/ipset.txt: Read-only file system
Applying Blacklists [7s]
For False Positive Website Bans Use; ( sh /opt/bin/firewall whitelist domain URL )this started happening since ab-solution closes off like below?
Code:
exiting AB-Solution
checking installation state
chmod: /tmp/mnt/AB-Solution/adblocking: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/scripts/ab_dnsmasq_postconf.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/scripts/send-email.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/functions.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/log-stats.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/pixelserv-tls.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/rotate-logs.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/update-ab-check.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/update-hosts.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/ab-solution.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/.config/email.cfg: Read-only file system
chmod: /opt/etc/init.d/S80pixelserv-tls: Read-only file system
chmod: /opt/etc/init.d/rc.func: Read-only file system
chmod: /opt/etc/init.d/rc.unslung: Read-only file system
chmod: /opt/bin/ab-solution: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/scripts/ab_dnsmasq_postconf.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/scripts/send-email.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/functions.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/log-stats.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/pixelserv-tls.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/rotate-logs.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/update-ab-check.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/addon/update-hosts.add: Read-only file system
chmod: /tmp/mnt/AB-Solution/ab-solution.sh: Read-only file system
chmod: /tmp/mnt/AB-Solution/adblocking/.config/email.cfg: Read-only file system
chmod: /opt/etc/init.d/S80pixelserv-tls: Read-only file system
chmod: /opt/etc/init.d/rc.func: Read-only file system
chmod: /opt/etc/init.d/rc.unslung: Read-only file system
chmod: /opt/bin/ab-solution: Read-only file system
all good, shutting down UIIs there a conflict somewhere?
Adamm
Part of the Furniture
That indicates an issue with your USB, it shouldn't be a read only file system. I'd try rebooting and see if the issue persists.
Similar threads
Similar threads
Similar threads
-
Skynet Installing Skynet causes router to crash and reboot
- Started by ovancantfort
- Replies: 26
-
Diversion Diversion & Skynet Missing on GUI after Router Reboot.- Started by cofetym
- Replies: 7
-
Blocking “RO” country code in Skynet blocks Proton VPN UK connections- Started by Gary_Dexter
- Replies: 0
-
Any usefulness for Skynet + pfsense/opnsense in transparent bridge mode?
- Started by pjd50
- Replies: 12
-
Solved Skynet running slow with install/update issues from AMTM?- Started by John Fitzgerald
- Replies: 10
-
Skynet Source LAN IP for outbound IP blocked by SkyNet
- Started by buzzy
- Replies: 8
-
-
-
Send stats Division and Skynet to webhook or mqtt
- Started by poudenes
- Replies: 0
-
Latest threads
-
A Dummy Wants to Watch Security Cam Video on his PC
- Started by Curmudgeon10
- Replies: 0
-
GT-AXE16000 UNII-4 Question ( wireless backhual XT8s)
- Started by ronan_zj
- Replies: 1
-
RT-AX86U - 2.4Ghz Utilization in Wireless log
- Started by stockman
- Replies: 5
-
AirMesh with RTAX88U Pro and RT-AX53U
- Started by mrlordziemniak
- Replies: 2
-
Blocking “RO” country code in Skynet blocks Proton VPN UK connections
- Started by Gary_Dexter
- Replies: 0
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!