Skynet Skynet - Router Firewall & Security Enhancements

[Treadler]

Many forced updates of Jack Yaz scripts & Skynet, a number of router reboots, everything working well but no Skynet ui as yet.
Curiouser & curiouser.......

 

[Adamm]

Many forced updates of Jack Yaz scripts & Skynet, a number of router reboots, everything working well but no Skynet ui as yet.
Curiouser & curiouser.......

What’s the contents of;

cat /tmp/menuTree.js

And output of;

ls -la /www/user

 

[SomeWhereOverTheRainBow]

What’s the contents of;

cat /tmp/menuTree.js

And output of;

ls -la /www/user

yea I had same problem after reboots and waiting 15 minutes skynet reports iptable fail

do you have any command recommendations so I can report to you output?

 

[Treadler]

What’s the contents of;

cat /tmp/menuTree.js

And output of;

ls -la /www/user

menuTree.js = No such file or directory

ww

What’s the contents of;

cat /tmp/menuTree.js

And output of;

ls -la /www/user

 

[Treadler]

menuTree.js = No such file or directory

ww

The next output throws me out of snb forums
I will try to figure out a different way.....

edit - no luck sorry.

 

[SomeWhereOverTheRainBow]

Will need some more info if this is the case, any output in your syslog? What is the output of debug info? Whats the contents of firewall-restart?

Jan  6 02:00:02 Skynet: [*] Rule Integrity Violation - Restarting Firewall [#11]
Jan  6 02:00:05 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/My_Part/skynet )
Jan  6 02:20:59 Skynet: [%] Startup Initiated... ( skynetloc=/tmp/mnt/My_Part/skynet )
Jan  6 02:21:40 Skynet: [*] Lock File Detected (start skynetloc=/tmp/mnt/My_Part/skynet) (pid=1129) - Exiting (cpid=10070)

logs after reboot

#!/bin/sh

sh /jffs/scripts/firewall start skynetloc=/tmp/mnt/My_Part/skynet # Skynet Firewall Addition

/jffs/scripts/FreshJR_QOS -start $1 &

/jffs/scripts/YazFi runnow & # YazFi Guest Networks

contents of firewall start script.

contents of service-event script

#!/bin/sh

/jffs/scripts/scribe kill-logger nologo "$1" "$2" & # added by scribe

/jffs/scripts/YazFi bounceclients "$1" "$2" & # YazFi Guest Networks

/jffs/scripts/connmon generate "$1" "$2" & # connmon

/jffs/scripts/ntpmerlin generate "$1" "$2" & # ntpMerlin

if [ "$1" = "start" ] && [ "$2" = "SkynetStats" ]; then sh /jffs/scripts/firewall debug genstats; fi # Skynet Firewall Addition

content of services stop

#!/bin/sh

/opt/etc/init.d/rc.unslung stop # Added by Diversion

sh /jffs/scripts/firewall save # Skynet Firewall Addition

*** mysteriously skynet finally starts. ***

 

[Adamm]

The next output throws me out of snb forums
I will try to figure out a different way.....

edit - no luck sorry.

Use pastebin

 

[Adamm]

Jan 6 02:00:02 Skynet: [*] Rule Integrity Violation - Restarting Firewall [#11]

Something is nuking rules in your iptables forward chain, please post a full syslog extract with the hours leading up to & after.

 

[fearz]

Will we be able to add / ban and unban via the GUI?

 

[Adamm]

Will we be able to add / ban and unban via the GUI?

Possibly in the future but will need further investigating, doing so could potentially introduce a security hazard as it could be used maliciously to execute commands.

 

[Treadler]

Use pastebin

 

[octopus]

That was a new way to use Pastebin.....
I got big laught.

 

[SomeWhereOverTheRainBow]

That was a new way to use Pastebin.....
I got big laught.

I saw the aaaaaa permissions
Chown aaaaaa:root

 

[octopus]

@Treadler

The common way is to post your content and post Pastebin-link in forum thread.

 

[Adamm]

Sorry gave you the wrong command, its just;

ls /www/user

But the fact /tmp/menuTree.js doesn't exist seems to be the main concern (not sure why as Skynet should generate a new copy during the webui mount process), how are any of @Jack Yaz 's scripts working if that's the case

So will also need the output of;

mount

and

cat /www/require/modules/menuTree.js

 

[Treadler]

Sorry gave you the wrong command, its just;

ls /www/user

cgi-bin shared-my uiDivStats

But the fact /tmp/menuTree.js doesn't exist seems to be the main concern (not sure why as Skynet should generate a new copy during the webui mount process), how are any of @Jack Yaz 's scripts working if that's the case

So will also need the output of;

mount

ubi:rootfs_ubifs on / type ubifs (ro,relatime)
devtmpfs on /dev type devtmpfs (rw,relatime,size=451672k,nr_inodes=112918,mode=755)
proc on /proc type proc (rw,relatime)
tmpfs on /var type tmpfs (rw,relatime)
tmpfs on /tmp/mnt type tmpfs (rw,relatime,size=16k,mode=755)
sysfs on /sys type sysfs (rw,relatime)
debugfs on /sys/kernel/debug type debugfs (rw,relatime)
mtd:bootfs on /bootfs type jffs2 (ro,relatime)
devpts on /dev/pts type devpts (rw,relatime,mode=600)
mtd:data on /data type jffs2 (rw,relatime)
tmpfs on /tmp/mnt type tmpfs (rw,relatime,size=16k,mode=755)
tmpfs on /tmp type tmpfs (rw,relatime)
/dev/mtdblock9 on /jffs type jffs2 (rw,noatime)
tmpfs on /www/require/modules/menuTree.js type tmpfs (rw,relatime)
/dev/sda1 on /tmp/mnt/Rt_Ax88u type ext4 (rw,nodev,relatime,data=ordered)


and

cat /www/require/modules/menuTree.js

 

[Treadler]

+ “menu tree”

/* menuTree_bwdpi_traffic_analyzer.js */
define(function(){
var menuTree = {
list: [
/*
{
menuName: "Title",
index: "Assign an index to this menu, it is also used for filtering",
tab: [
{
url: "Put url here",
tabName: "
Assign a title for this tab, leave this field empty to bypass this tab,
fill in '__HIDE__' to hide the tab switcher,
fill in '__INHERIT__' to inhert tab index from referred page.
"
}
]
}
*/
{
menuName: "<#401#>",
index: "menu_QIS",
tab: [
{url: "QIS_wizard.htm", tabName: "__HIDE__"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
/* ========================================================================================/
{
menuName: "<#296#>",
index: "menu_Split",
tab: [
{url: "NULL", tabName: "__HIDE__"}
]
},
{
menuName: "<#293#>",
index: "menu_Index",
tab: [
{url: "<% networkmap_page(); %>", tabName: "__HIDE__"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
{
menuName: "<#214#>",
index: "menu_GuestNetwork",
tab: [
{url: "Guest_network.asp", tabName: "<#214#>"},
{url: "Captive_Portal.asp", tabName: "Free Wi-Fi"},
{url: "Captive_Portal_Advanced.asp", tabName: "<#3368#>"},
{url: "Guest_network_fbwifi.asp", tabName: "Facebook Wi-Fi"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
{
menuName: "<#1058#>",
index: "menu_AiProtection",
tab: [
{url: "AiProtection_HomeSecurity.asp", tabName: "__HIDE__"},
{url: "AiProtection_HomeProtection.asp", tabName: "<#1013#>"},
{url: "AiProtection_MaliciousSitesBlocking.asp", tabName: "<#1057#>"},
{url: "AiProtection_IntrusionPreventionSystem.asp", tabName: "<#1074#>"},
{url: "AiProtection_InfectedDevicePreventBlock.asp", tabName: "<#975#>"},
{url: "AiProtection_WebProtector.asp", tabName: "<#379#>"},
{url: "ParentalControl.asp", tabName: "__INHERIT__"},
{url: "AiProtection_AdBlock.asp", tabName: "Ad Blocking"},
{url: "AiProtection_Key_Guard.asp", tabName: "Key Guard"},
{url: "YandexDNS.asp", tabName: "<#3324#>"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
{ //for without bwdpi model, RT-N66U_C1
menuName: "<#291#>",
index: "menu_QoS",
tab: [
{url: "QoS_EZQoS.asp", tabName: "<#2161#>"},
{url: "Main_TrafficMonitor_realtime.asp", tabName: "<#679#>"},
{url: "Main_TrafficMonitor_last24.asp", tabName: "__INHERIT__"},
{url: "Main_TrafficMonitor_daily.asp", tabName: "__INHERIT__"},
{url: "AdaptiveQoS_ROG.asp", tabName: "<table style='margin-top:-7px;'><tr><td><img src='/i,
{url: "Main_Spectrum_Content.asp", tabName: "<#2623#>"},
{url: "AdaptiveQoS_TrafficLimiter.asp", tabName: "Traffic Limiter"},
{url: "Advanced_QOSUserPrio_Content.asp", tabName: "__INHERIT__"},
{url: "Advanced_QOSUserRules_Content.asp", tabName: "__INHERIT__"},
]
},
{ //for without bwdpi model, RT-N66U_C1
menuName: "<#379#>",
index: "menu_ParentalControl",
tab: [
{url: "ParentalControl.asp", tabName: "<#379#>"},
{url: "YandexDNS.asp", tabName: "<#3324#>"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
{
menuName: "<#793#>",
index: "menu_BandwidthMonitor",
tab: [
{url: "AdaptiveQoS_Bandwidth_Monitor.asp", tabName: "<#1199#>"},
{url: "QoS_EZQoS.asp", tabName: "<#2161#>"},
{url: "QoS_Stats.asp", tabName: "Classification"},
{url: "AdaptiveQoS_WebHistory.asp", tabName: "<#789#>"},
{url: "AdaptiveQoS_ROG.asp", tabName: "<table style='margin-top:-7px;'><tr><td><img src='/i,
{url: "Main_Spectrum_Content.asp", tabName: "<#2623#>"},
{url: "Advanced_QOSUserPrio_Content.asp", tabName: "__INHERIT__"},
{url: "Advanced_QOSUserRules_Content.asp", tabName: "__INHERIT__"},
{url: "AdaptiveQoS_Adaptive.asp", tabName: "__INHERIT__"},
{url: "NULL", tabName: "__INHERIT__"}
]
},
{
menuName: "ç½æUUå�é

 

[Jack Yaz]

@Treadler and any other users of my scripts - please update to the latest versions. Then reboot. All should mount correctly.

 

[.TT.]

Hi Adamm and @Jack Yaz

I am having the same issue as @Treadler .
Skynet tab will not show. Force update on Skynet and connmon multiple times.
Connmon tab is showing and working most of the time but will sometimes display the wrong page.

RT-AC86U 384.15_alpha1-g4fecf771de
https://pastebin.com/ayL1gPhB


Hope these logs will provide a clue.
As always, thank you for all of your hard work!

 

[Jack Yaz]

Hi Adamm and @Jack Yaz

I am having the same issue as @Treadler .
Skynet tab will not show. Force update on Skynet and connmon multiple times.
Connmon tab is showing and working most of the time but will sometimes display the wrong page.

RT-AC86U 384.15_alpha1-g4fecf771de
https://pastebin.com/ayL1gPhB


Hope these logs will provide a clue.
As always, thank you for all of your hard work!

https://www.snbforums.com/threads/r...urity-enhancements.16798/page-283#post-539008