Skynet Skynet v8 - Router Firewall & Security Enhancements

[John Fitzgerald]

It may not be specific to that blocklist. All I know is after changing from the default I got the same errors as the others. Lost access over ssh and the gui. Also to note, after power cycling my router the swapfile was also gone (it was physically still there, but not seen by amtm).

did you see my post#13?

 

[Ripshod]

did you see my post#13?

Yes, saw that. Was just adding my own experience and something you never saw
Only now, with the default blocklist everything is fine again.

 

[John Fitzgerald]

Yes, saw that. Was just adding my own experience and something you never saw
Only now, with the default blocklist everything is fine again.

The problem I'm experiencing is with the default settings. Once, I added back my country block list to see if that had any effect, but the problem still occurred after the reboot, so that has no bearing on my issue.

The other thing is my system is more basic than most and was completely reset from scratch with the new firmware update 388.10_2.

 

[Aloyz]

After installing version 8 (upgrade from 7.6.5), Skynet refused to start at all. The only thing that helped was completely removing everything, creating a new swap file, and reinstalling from scratch.

Skynet started, but attempting to add an IoT block via the Skynet options resulted in the following message:

ipset v7.6: Error in line 1: Syntax error: cannot parse comment: resolving to IPv4 address failed

The command “firewall settings iot ban IP_ADDRESS” also did not help, the devices simply did not add themselves to the blocked list, and “IOT Blocking” was “Disabled.” Manually adding an iptables rule helped and allowed the device to be blocked.

"ipset add Skynet-IOT IP_ADDRESS -exist"

Attempting to add a custom BL/ML https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list resulted in the message “mv: can't rename ‘/jffs/curllst’”, Skynet hung on " Applying New Blacklist |" and the connection to the router was blocked. Only restarting the router and reinstalling Skynet helped.

After all, I returned to version 7.6.5, which works without any problems, and I am patiently waiting for the v8 upgrade.


If anyone else would also like to return to 7.6.5, here's quick how:

/usr/sbin/curl -fsSL "https://raw.githubusercontent.com/A...47a96d843dba8e33101b6644eb8205cee/firewall.sh" -o "/jffs/scripts/firewall" \
&& chmod 755 /jffs/scripts/firewall && sh /jffs/scripts/firewall install

 

[AvalonOC]

Don't install this version; it will disconnect you from the internet. I reverted to version 7.6.5 using BACKUPMON, but I still had internet problems. I managed to access SKYNET and temporarily disable it. I hope Adamm can fix the issue; these things happen.

 

[Ripshod]

Don't install this version; it will disconnect you from the internet. I reverted to version 7.6.5 using BACKUPMON, but I still had internet problems. I managed to access SKYNET and temporarily disable it. I hope Adamm can fix the issue; these things happen.

Works fine with the default blocklist

 

[dave14305]

These bizarre curl messages about moving the curllst log could be a result of too many parallel curl downloads, especially if using over-the-top custom lists.

asuswrt-merlin.ng/release/src/router/curl/src/tool_main.c at e6461ffd11c64d4ad5a2c6ed0ade5cac21d964bf · RMerl/asuswrt-merlin.ng

Third party firmware for Asus routers (newer codebase) - RMerl/asuswrt-merlin.ng

github.com

(This is an Asus customization of curl for security logging.)

 

[Ripshod]

This should have all been beaten out in public betas or at least invites to a 'develop' build, this what they're for.

 

[XxUnkn0wnxX]

scary scary update, thought I bricked my router, had to ssh in fast just to uninstall. thank god for backupmon..
Don't forget to disable auto updates guys. I had this on..

 

[Blacklistedcard]

I had the same problem with a custom list. I had to disable skynet on my BE98Pro. Hopefully we figure out what the problem is.

 

[XxUnkn0wnxX]

I was using Jack-Sparr0w-2o4 Filters
And I did nuke the config fast & ipset, but Skynet still kept shutting me out till I recalled the uninstall command after my 7th reboot.

 

[jksmurf]

I had the same problem with a custom list. I had to disable skynet on my BE98Pro. Hopefully we figure out what the problem is.

Quick question, do you or does anyone else know whether “temporarily” disabling Skynet survives a reboot i.e. remains disabled after a reboot? If not I might need to uninstall just to make sure it doesn’t bork the internet access.