Skynet Skynet Version v7.2.8 isn't blocking manually added domains

[Arrow]

Using Skynet Version v7.2.8, when I ban a domain, such as msn.com, I can still visit msn.com from a web browser on my LAN.
Any idea why?

 

[Arrow]

firewall stats search ip 13.82.28.61

Logging Data Detected in /tmp/mnt/router/skynet/skynet.log - 6.0M
Monitoring From Jan 2 23:00:15 To Jan 5 18:44:36
21975 Block Events Detected
4604 Unique IPs
1 Manual Bans Issued

Warning: 13.82.28.61 is in set Skynet-Whitelist.
Warning: 13.82.28.61 is in set Skynet-Blacklist.
13.82.28.61 is NOT in set Skynet-BlockedRanges.

Wait. What? Why is it my whitelist? I never added it.

/jffs/scripts/firewall whitelist remove entry 13.82.28.61


================================================================================

Removing 13.82.28.61 From Whitelist
ipset v7.6: Element cannot be deleted from the set: it's not added
Saving Changes


What?

 

[dave14305]

Try running:

ipset list Skynet-Whitelist | grep "^13\.8"

There might be a whitelisted range of addresses.

 

[Arrow]

I uninstalled and reinstalled Skynet.

I banned ru cn kp

Then I banned msn.com again, and I can still visit msn.com


firewall stats search ip 13.82.28.61

Logging Data Detected in /tmp/mnt/router/skynet/skynet.log - 12.0K
Monitoring From Jan 5 19:05:00 To Jan 5 19:13:20
40 Block Events Detected
36 Unique IPs
1 Manual Bans Issued

Warning: 13.82.28.61 is in set Skynet-Whitelist.
Warning: 13.82.28.61 is in set Skynet-Blacklist.
13.82.28.61 is NOT in set Skynet-BlockedRanges.

Whitelist Reason;
-*-
Blacklist Reason;
"ManualBanD: msn.com"


IP Location - United States (MICROSOFT-CORP-MSN-AS-BLOCK / AS8075)

13.82.28.61 First Tracked On
13.82.28.61 Last Tracked On
0 Blocks Total

Event Log Entries From 13.82.28.61;
Jan 05 14:08:27 Skynet: [Manual Ban] TYPE=Domain SRC=13.82.28.61 Host=msn.com

First Block Tracked From 13.82.28.61;

10 Most Recent Blocks From 13.82.28.61;


Top 10 Targeted Ports From 13.82.28.61 (Inbound);


-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------



Top 10 Sourced Ports From 13.82.28.61 (Inbound);


-------- | -------- | --------------
| Hits | | | Port | | | SpeedGuide |
-------- | -------- | --------------




================================================================================


[#] 30738 IPs (+0) -- 15472 Ranges Banned (+0) || 40 Inbound -- 0 Outbound Conn]

 

[Arrow]

Try running:

ipset list Skynet-Whitelist | grep "^13\.8"

There might be a whitelisted range of addresses.

ipset list Skynet-Whitelist | grep "^1
3\.8"
13.83.0.0/16 comment "CDN-Whitelist: Github"
13.84.0.0/15 comment "CDN-Whitelist: Github"
13.88.128.0/18 comment "CDN-Whitelist: Github"
13.86.128.0/17 comment "CDN-Whitelist: Github"
13.86.0.0/17 comment "CDN-Whitelist: Github"
13.87.128.0/17 comment "CDN-Whitelist: Github"
13.88.0.0/17 comment "CDN-Whitelist: Github"
13.89.0.0/16 comment "CDN-Whitelist: Github"
13.82.0.0/16 comment "CDN-Whitelist: Github"

 

[dave14305]

13.82.0.0/16 comment "CDN-Whitelist: Github"

This does it.

Better to block the msn.com domain in DNS (e.g. Diversion or Pi-Hole) than to ban the IP.

 

[Arrow]

This does it.

Better to block the msn.com domain in DNS (e.g. Diversion or Pi-Hole) than to ban the IP.

Thank you. I was wondering why I couldn't remove it.