packages/net/banip, branch master

banip: release 1.8.5-1

2026-04-07T17:32:34Z

* removed needless fork/exec calls (#29010) * removed needless eval calls * added parallel country and ASN feed downloads (#29010) * rework the IP monitor: * IP extraction, counting, and threshold detection now run entirely inside a single gawk process * added a dynamic cache management and a three-tier IP deduplication * added asynchronous/non-blocking RDAP requests * hardend the cgi script and mail template * fixed #28998 * LuCI: added more status information * LuCI: more fixes & optimizations (e.g. #8486) * readme update Co-authored-by: Colin Brown Signed-off-by: Dirk Brenken

banip: update 1.8.1-3

2026-03-22T15:16:21Z

* add better input validation to the f_content and f_search functions, to compensate for the very limited Wildcard ACL mechanisms in LuCI, see https://github.com/openwrt/luci/issues/8435 for reference * LuCI: add a proper poll mechanism to mitigate Reporting timeouts on "Search" and "Refresh", even with big Sets * LuCI: Refine some ACLs * LuCI: more fixes & optimizations * readme update Signed-off-by: Dirk Brenken

banip: release 1.8.1-1

2026-03-15T17:18:04Z

* the debug mode now captures internal error output in a dedicated log file, located by default in the banIP base directory as /tmp/ban_error.log * replaced the non-functional recursive PID tree walk in f_rmpid with a correct iterative implementation * added several IP validator improvements * fixed a copy-paste error in f_report * fixed a uninitialized variable in f_actual * fixed missing token validation in banip.cgi * various other minor improvement & fixes * removed abandoned nixspam feed * LuCI: various fixes & optimizations * readme update Signed-off-by: Dirk Brenken

banip: update 1.8.0-3

2026-02-21T10:48:49Z

* support the new possible nft expiry options in the backend as well Signed-off-by: Dirk Brenken

banip: release 1.8.0-1

2026-01-12T21:59:43Z

* hardened the uci config parsing * added a fast, flexible & secure IPv4/IPv6 validator function, it eliminates > 99 % of garbage inputs Please note: The ‘rule’ in the feed file now only contains parameters for the IP validator; details can be found in the readme file. Old custom feed files are not compatible and will be backed up/removed via the uci-defaults script * added BCP38 support: to block packets with spoofed source IP addresses in all supported chains * optimized the log monitor plus performance improvements * removed the pallebone feed (discontinued) * added the ipexdbl feed * various small improvements * LuCI: add the BC38 option under Table/Chain Settings * LuCI: updating the custom feed editor * LuCI: small usability improvements * readme update Signed-off-by: Dirk Brenken

banip: release 1.6.0-1

2025-12-04T19:25:46Z

* split block/logging rules (fixed #27990) * adapt reload functions to support the new split logic * the banIP status now includes the backend- and the frontend version information * fixed a config parsing error with non existing dirs (reported in the forum) * fixed a small reporting issue (reported in the forum) * added a new public dns feed (by default restricted to outbound, ports 53 and 853) * added a new gawk dependency due to significant performance gains * LuCI: no longer call the logread binary, use rpc / the ubus log object instead * LuCI: various code cleanups * LuCI: various small usability improvements * readme update Signed-off-by: Dirk Brenken

banIP: update 1.5.6-7

2025-08-04T18:53:59Z

* skip rdap requests/replies with placeholders for all IPv4/IPv6 addresses * sanitize possible bogus config values, e.g. '/dev/null' as a directory * change URL for beycyber feed Signed-off-by: Dirk Brenken

banIP: update 1.5.6-6

2025-06-28T20:10:34Z

* limit nft logging to a rate 10/second to prevent possible log-flooding * skip external feed processing if "allowlist-only" mode is fully enabled (in in- and outbound) * remove needless default icmpv6 rule in wan-input * refine the housekeeping script (uci-defaults) * readme update Signed-off-by: Dirk Brenken

banIP: update 1.5.6-5

2025-06-14T17:47:19Z

* fixed the restore rc handling * skip allowlist entries during map creation * disable the map button by default (only enabled if map & NFT counter are selected) * disable the content filter checkbox for elements with hits by default (only enabled if NFT counter are selected) * readme update Signed-off-by: Dirk Brenken

banIP: update 1.5.6-4

2025-06-09T05:01:02Z

* show the IP plus the packet counter in the modal Set content view (or on the CLI) * add a filter to show only elements with hits in the modal Set content view (or on the CLI) * limit the element output with hits to max. 50 per Set on the Set Reporting overview page * fixed set names suffix in the report output * fixed the Set content view for MAC based Sets * display the map even if the HomeIP cannot be determined Signed-off-by: Dirk Brenken