packages/net/banip/Makefile, branch master

banip: update 1.9.1-5

2026-11-02T16:05:50Z

various log monitor fixes/improvements: - fix bogus IPv6 extraction - map IPv4-mapped IPv6 addresses to IPv4 - exclude IPv6 loopback/unspecified address - add haproxy log terms to readme Signed-off-by: Dirk Brenken

banip: update 1.9.1-4

2026-11-01T18:50:23Z

- always count feed rule hits (restore old behavior); 'ban_nftcount' now controls only the per-element counters and the base chain rule counters - reduce the memory footprint of Set element counts, new awk helper 'f_setcnt' (replace jsonfilter) - reduce the memory footprint of the Set Reporting, new awk helper 'f_sethits' (replace jsonfilter) - readme update Signed-off-by: Dirk Brenken

banip: update 1.9.1-3

2026-10-31T07:17:04Z

- add a new generic 'ban_authkey' option and an '{authkey}' feed URL placeholder for sources which require a personal API-Key, feeds with this placeholder are skipped as long as no valid key is set - mask the key in the debug error log - switch the 'urlhaus' feed to the authenticated 'urls_recent.txt' export (requires a free abuse.ch Auth-Key); the old IDS ruleset URL is frozen since 2024-10 - readme update Signed-off-by: Dirk Brenken

banip: update 1.9.1-2

2026-10-17T13:10:28Z

- use the GNU regex matchers with gawk >= 5.4; gawk 5.4 switched its default regex engine to MinRX, this slows down the ip validation a lot (~35x slower) Signed-off-by: Dirk Brenken

banip: release 1.9.1-1

2026-10-15T15:06:18Z

- faster IPv4 validation in f_chkip (~2-3 × faster) - avoid full nft element fetches in the following functions: f_actual, f_down (reload & count) and f_search Signed-off-by: Dirk Brenken

banip: update 1.9.0-3

2026-09-27T19:00:39Z

* optimized the default download parameters for curl/wget * optimized the rdap range recognition * readme update Signed-off-by: Dirk Brenken

banip: update 1.9.0-2

2026-09-25T21:11:37Z

* use RDAP startAddress/endAddress as a single interval element (one nft call per lookup) * validate RDAP ranges, block nft command and log line injection * always restart the procd instance (unique nonce via env) * restart the log monitor if the log reader terminates (e.g. logd restart) * f_rmpid clears the pidfile before killing child processes * EXIT trap: route unexpected service exits through f_log "err" * readme update Signed-off-by: Dirk Brenken

banip: release 1.9.0

2026-09-19T17:50:03Z

- add the trigger interfaces to the runtime status - support url templates for the country and asn feeds; the readme contains an example of how to use an alternative MaxMind source as country feed - fix the fallback handling of the custom feed file - disable the curl url globbing - drop the unsupported 'w' nft expiry unit - LuCI: show the trigger interfaces, label the board model - LuCI: drop the unsupported 'w' expiry unit - LuCI: fix the custom feed file handling - readme update Signed-off-by: Dirk Brenken

banip: update 1.8.13-2

2026-09-10T18:02:03Z

- cap the GeoIP lookup at 15 batch requests per report run (ip-api.com rate limit) - reuse the map data for 60 seconds instead of querying the service again - log batch requests without geo data - limit the parallel background jobs exactly to `ban_cores (same as adblock) - LuCI: fix the GeoIP map description - readme update Signed-off-by: Dirk Brenken

banip: release 1.8.13

2026-09-08T15:58:17Z

- f_getup() collects the wan state in one pass and diffs the uplink against the local allowlist - new f_refresh() patches only the changed allowlist Set elements in a single atomic nft transaction, without touching the running instance - the procd trigger calls start refresh, start_service() picks the path, a manual start is unaffected - wan6 in ban_trigger is supported now - updatted the README and moved to the package root - LuCI: reworked the feed editor, get rid of custom css Signed-off-by: Dirk Brenken dev@brenken.org Signed-off-by: Dirk Brenken