Skynet Skynet v8 - Router Firewall & Security Enhancements

[Adamm]

Is that a normal behaviour, that after every reboot, Skynet detects a lock file?

Yes, firewall-start is called up to 4 times during startup, Skynet handles all this in the background.

 

[Boji]

Prior to v8 I recall if I was using skynets built in debug log tail, it uses lots of cpu; if the ssh window that spawned it was force closed it would continue consuming resources in the background running the operation; but if control+C it would stop; the only solution I had at the time was a reboot. Unless I'm mistaken, it seems the problem persists.

 

[Adamm]

Prior to v8 I recall if I was using skynets built in debug log tail, it uses lots of cpu

This is normal as all log entries are processed, I'll look into if the regex can be improved.

if the ssh window that spawned it was force closed it would continue consuming resources in the background running the operation; but if control+C it would stop; the only solution I had at the time was a reboot. Unless I'm mistaken, it seems the problem persists.

Is there some way for me to reproduce this as I am unable to.

 

[Boji]

This is normal as all log entries are processed, I'll look into if the regex can be improved.



Is there some way for me to reproduce this as I am unable to.

Well in htop I am seeing this line constantly when skynet debug output log is running
grep -E reply .* is 164\.138\.125\.249 /opt/var/log/dnsmasq.log /opt/var/log/dnsmasq.logl /opt/var/log/dnsmasq.log2

If firewall log not closed gracefully (Ctrl+C), this grep command pops up intermittently consuming significant resources in brief spikes; not steady like when the firewall log is open, but every few seconds. Compare it to gracefully closing the firewall log.... you will see far less cpu usage and no intermittent grep command. Happens to me every time. I have to reboot my router now after this last test. CPU spikes to 50% sometimes a bit more sometimes a bit less every few seconds on AC66UB1. With graceful exit, maybe 5-8% average cpu.

May be more easily detectable with minimal setup. I disabled all amtm app related ui for router gui. (diversion webui disabled)

║ Country Lookup For Stats ║ [Disabled]
║ Display WebUI ║ [Disabled]

Am using bitvise xterm as ssh.

 

[SG2088]

I am still using 7.6.5 and have been following this thread. Having said this, is the latest version stable enough to upgrade? Or shall I wait? I do not want to break anything as I work from home and cannot afford an outage. Thanks!

 

[Viktor Jaep]

I am still using 7.6.5 and have been following this thread. Having said this, is the latest version stable enough to upgrade? Or shall I wait? I do not want to break anything as I work from home and cannot afford an outage. Thanks!

I have a big list of country blocks and a healthy set of blocklists, but things have been pretty quiet on this front. I've been waiting for an all-green before pulling the trigger as well. I will probably wait for the weekend to get a last fresh backup and try again.

 

[SG2088]

I have a big list of country blocks and a healthy set of blocklists, but things have been pretty quiet on this front. I've been waiting for an all-green before pulling the trigger as well. I will probably wait for the weekend to get a last fresh backup and try again.

Thanks. I'll wait a few more days as well.