Skynet Skynet v8 - Router Firewall & Security Enhancements

[dave14305]

Skynet: USB install directory not ready — sleeping 10s (1/10) - reinstalling gives same error - swap file is there on /tmp/mnt/LINUXCULBUR/ - any ideas?

Check that the path matches what is in firewall-start and is writable.

grep skynetloc /jffs/scripts/firewall-start
ls -ld /tmp/mnt/*/skynet
touch /tmp/mnt/LINUXCULBUR/skynet/test
mount | grep mnt

 

[joe scian]

Check that the path matches what is in firewall-start and is writable.

grep skynetloc /jffs/scripts/firewall-start
ls -ld /tmp/mnt/*/skynet
touch /tmp/mnt/LINUXCULBUR/skynet/test
mount | grep mnt

thanks

 

[routytout]

I've been using Skynet for years without much issues but lately I've been experiencing problems whereby regular domains I visit are blocked at a quite alarming rate. Sometimes even while I'm using them. I then need to unban the domain in Skyney and update the Diversion blocklist for the site to work again.

I'm at a loss what it could be. I'm using a VPN but that has never been an issues, I have been using Unbound to do DNS Lookups over my VPN using VPNmon for the last half year or so but I didn't have any issues with that either before. Has anyone any idea what this could be?

 

[Marcus Yansen]

I've been using Skynet for years without much issues but lately I've been experiencing problems whereby regular domains I visit are blocked at a quite alarming rate. Sometimes even while I'm using them. I then need to unban the domain in Skyney and update the Diversion blocklist for the site to work again.

I'm at a loss what it could be. I'm using a VPN but that has never been an issues, I have been using Unbound to do DNS Lookups over my VPN using VPNmon for the last half year or so but I didn't have any issues with that either before. Has anyone any idea what this could be?

i dont seem to be having such an issue (using skynet too) - possible ur blocklists? are you saying problem is resolved when u turn off skynet, if so could it be ur blocklists are overkill or something?

 

[routytout]

i dont seem to be having such an issue (using skynet too) - possible ur blocklists? are you saying problem is resolved when u turn off skynet, if so could it be ur blocklists are overkill or something?

I've been using the same two blocklists in Diversion for years and I checked but the domains are not included but they are being blocked by Skynet. So that makes me believe that it is Skynet that somehow believes they should be blocked. But I have no prior experience how I would troubleshoot such a thing. Skynet used to just work for me so I never really had to do much digging into it. I just posted here hoping someone might have some insight before going any further.

 

[Twiglets]

Please be aware that blocklists are generally curated by a 3rd party, which means that they change according to the 3rd parties own criteria.
Sometimes blocklists get changes that are flawed or accidentally 'too agressive'.
These are usually corrected in due course BUT it may take a little time for the issues to be reported then corrected.
This is the risk you take with other peoples blocklists which you do not directly control.

Are you using the default blocklists in Skynet ?

If not you have the option to reset the blocklists to default. [Main Menu Option 3 then Option 3 AGAIN (Reset Filter List)]

OR

Within Skynet you can add 'Whitelisted entries' [Main Menu Option 4] (These will be the 'names/ip's' that you are finding blocked)

Select Whitelist Option:
[1]  --> IP/Range
[2]  --> Domain
[3]  --> ASN
[4]  --> Refresh VPN Whitelist
[5]  --> Remove Entries
[6]  --> Refresh Entries
[7]  --> View Entries

[e]  --> Exit

[1-7]:

 

[routytout]

Please be aware that blocklists are generally curated by a 3rd party, which means that they change according to the 3rd parties own criteria.
Sometimes blocklists get changes that are flawed or accidentally 'too agressive'.
These are usually corrected in due course BUT it may take a little time for the issues to be reported then corrected.
This is the risk you take with other peoples blocklists which you do not directly control.

Are you using the default blocklists in Skynet ?

If not you have the option to reset the blocklists to default. [Main Menu Option 3 then Option 3 AGAIN (Reset Filter List)]

I'm using the defaults lists but I've resetted the blocklists nevertheless. I've enabled logging and I'll see if I can figure out what the ban reason is and take it from there. Thanks for your help.

 

[EmeraldDeer]

Assuming you have command line access to your router, find out which blocklist is causing the Skynet outbound drop. Example:

# firewall stats search domain settings-prod-cin-1.centralindia.cloudapp.azure.com

The Skynet command line help is at:

https://github.com/Adamm00/IPSet_ASUS

If you temporarily need to switch Skynet blocklists URL for testing, here is what I am using:

https://raw.githubusercontent.com/ViktorJp/Skynet/main/filter.list

 

[EmeraldDeer]

To search a domain in Diversion blocklists, here is an example:

# grep "variations.brave.com" /opt/share/diversion/backup/hostsfile*txt
/opt/share/diversion/backup/hostsfile_cdn.jsdelivr.net-gh-hagezi-dns-blocklists@latest-dnsmasq-pro.txt:local=/variations.brave.com/

Here are the custom blocking lists I am using:

https://big.oisd.nl/dnsmasq2
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/dnsmasq/anti.piracy.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/dnsmasq/gambling.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/dnsmasq/pro.txt
https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/dnsmasq/tif.txt