Problem internet with banip

Installing and Using OpenWrt Network and Wireless Configuration
1

Hi

After I configured banip, I have some problems with the WiFi, some website that usually works fine are now only available if WiFi is off, and I had problem to connect my android tv box etc.
Is it possible?

2

This doesn’t sound like a problem related to ban ip. Try turning that off and see if things improve.

1 Like
3

Yes I can access now.

4

Ok... so it's good that it is now identified. I don't use banip, so I can't specifically help fix that. But it means that the status of wifi is not related to the problem -- you can focus on BanIP.

I'll leave it to someone else to help since I have no expertise with this pacakge.

2 Likes
5

It is possible that you used some balcklist source which includes some sites that you need and they are legitimate.

  1. You can whitelist the desired sites.
  2. You can remove the custom blacklists and let banIP build the blacklist from the failed attempts to access your router.
1 Like
6

here my config

root@OpenWrt:~# cat /etc/config/banip

config banip 'global'
        option ban_enabled '1'
        option ban_debug '0'
        option ban_autodetect '1'
        list ban_logterm 'Exit before auth from'
        list ban_logterm 'luci: failed login'
        list ban_logterm 'error: maximum authentication attempts exceeded'
        list ban_logterm 'sshd.*Connection closed by.*\[preauth\]'
        list ban_logterm 'SecurityEvent=\"ChallengeResponseFailed\".*RemoteAddress='
        option ban_fetchcmd 'curl'
        option ban_protov4 '1'
        list ban_ifv4 'wan'
        list ban_dev 'eth0.2'
        list ban_feed 'adaway'
        list ban_feed 'adguard'
        list ban_feed 'country'
        list ban_feed 'darklist'
        list ban_feed 'debl'
        list ban_feed 'doh'
        list ban_feed 'drop'
        list ban_feed 'dshield'
        list ban_feed 'edrop'
        list ban_feed 'firehol1'
        list ban_feed 'firehol2'
        list ban_feed 'firehol3'
#       list ban_feed 'firehol4'
        list ban_feed 'greensnow'
        list ban_feed 'iblockads'
        list ban_feed 'iblockspy'
        list ban_feed 'myip'
        list ban_feed 'nixspam'
        list ban_feed 'oisdnsfw'
        list ban_feed 'proxy'
        list ban_feed 'sslbl'
        list ban_feed 'talos'
        list ban_feed 'threat'
        list ban_feed 'threatview'
        list ban_feed 'tor'
        list ban_feed 'uceprotect1'
        list ban_feed 'uceprotect2'
        list ban_feed 'uceprotect3'
        list ban_feed 'urlhaus'
        list ban_feed 'urlvir'
        list ban_feed 'voip'
        list ban_feed 'yoyo'
        list ban_country 'ru'
        list ban_country 'cn'
7

Any special reason why not using the support thread? Anyway, regarding you problem:

Please note: the columns "WAN-INP", "WAN-FWD" and "LAN-FWD" show for which chains the feeds are suitable in common scenarios, e.g. the first entry should be limited to the LAN forward chain - see the config options 'ban_blockinput', 'ban_blockforwardwan' and 'ban_blockforwardlan' below.

...e.g. a blocklist like "doh" in your wan-input chain will likely break your internet connection, better your DNS on the router. Please do not blindly activate various feeds. Start only with a few feeds and try to figure how the software works.

3 Likes
8

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.