packages/net/banip/files/banip.cgi, branch master

banip: release 1.8.6-1

2026-04-16T20:13:33Z

* fixed the initialization of the banIP rundir (reported in the forum) * sanitize possible windows line endings in local block- and allowlist * refine the cpu/core detection * code clean-up/linting Signed-off-by: Dirk Brenken

banip: release 1.8.5-1

2026-04-07T17:32:34Z

* removed needless fork/exec calls (#29010) * removed needless eval calls * added parallel country and ASN feed downloads (#29010) * rework the IP monitor: * IP extraction, counting, and threshold detection now run entirely inside a single gawk process * added a dynamic cache management and a three-tier IP deduplication * added asynchronous/non-blocking RDAP requests * hardend the cgi script and mail template * fixed #28998 * LuCI: added more status information * LuCI: more fixes & optimizations (e.g. #8486) * readme update Co-authored-by: Colin Brown Signed-off-by: Dirk Brenken

banip: release 1.8.1-1

2026-03-15T17:18:04Z

* the debug mode now captures internal error output in a dedicated log file, located by default in the banIP base directory as /tmp/ban_error.log * replaced the non-functional recursive PID tree walk in f_rmpid with a correct iterative implementation * added several IP validator improvements * fixed a copy-paste error in f_report * fixed a uninitialized variable in f_actual * fixed missing token validation in banip.cgi * various other minor improvement & fixes * removed abandoned nixspam feed * LuCI: various fixes & optimizations * readme update Signed-off-by: Dirk Brenken

banip: release 1.8.0-1

2026-01-12T21:59:43Z

* hardened the uci config parsing * added a fast, flexible & secure IPv4/IPv6 validator function, it eliminates > 99 % of garbage inputs Please note: The ‘rule’ in the feed file now only contains parameters for the IP validator; details can be found in the readme file. Old custom feed files are not compatible and will be backed up/removed via the uci-defaults script * added BCP38 support: to block packets with spoofed source IP addresses in all supported chains * optimized the log monitor plus performance improvements * removed the pallebone feed (discontinued) * added the ipexdbl feed * various small improvements * LuCI: add the BC38 option under Table/Chain Settings * LuCI: updating the custom feed editor * LuCI: small usability improvements * readme update Signed-off-by: Dirk Brenken

banIP: release 1.5.0-1

2025-01-16T19:10:34Z

* change the chain structure: only two regular chains contain the generated banIP sets. “_inbound” covers the base chains WAN-Input and WAN-Forward, ‘_outbound’ covers the base chain LAN-Forward. * pre-configure the default chains for every feed in the banip.feeds json file, no longer blocks selected feeds in all chains by default * it's now possible to split country and asn Sets by country or asn (disabled by default) * support Set counters to report easily suspicious IPs per Set (disabled by default) * make it possible, to opt out certain chains from the deduplication process * the element search now returns all matches (and not only the first one) * the report engine now includes statistics about the Inbound & Outbound chains and the Set counters (optional) * save the temp. files of possible nft loading errors in "/tmp/banIP-errors" by default for easier debugging * various code improvements * remove ssbl feed (deprecated) * add two new vpn feeds * update the readme Signed-off-by: Dirk Brenken

banip: update 1.0.0-4

2024-06-22T08:13:22Z

* relax the firewall pre-check if fw4 is not running * replace former stale tor feed source with 'https://www.dan.me.uk/torlist/?exit' * add openvpn log term/search pattern example to the readme * the default config now includes only log terms for dropbear and LuCI, all others are optional * readme update Signed-off-by: Dirk Brenken

banip: bump to release 0.9.3-1

2023-12-11T16:35:40Z

* provides an option to transfer log events on remote servers via cgi interface (disabled by default), see readme for details * refine the allowlist check to support IP intervals as well before adding an IP to the blocklist Signed-off-by: Dirk Brenken