We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
docs: Add port egress commands and emulate --out option - Add 'nftban port egress' subcommand documentation (stats/audit/recommend/enforce) - Add egress workflow section with step-by-step guide - Update 'nftban port status' with --listening/--inbound/--outbound options - Add '--out' option to emulate command for egress testing - Add tip linking emulate --out to port egress enforce Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: add trust --json examples (v1.19.13) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: clarify DB-IP Lite is default GeoIP provider - Configuration-Reference.md: Fix misleading text that suggested MaxMind license key was "required for updates". DB-IP Lite is default and requires no registration or license key. - Security-Operations-Guide.md: Rewrite geo-blocking section to lead with DB-IP quick start (no config needed), make MaxMind clearly optional. - GeoIP-Database-Guide.md: Update version footer. DB-IP Lite is the default provider, works out of the box. MaxMind GeoLite2 is optional (requires free registration). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: add OSSRA 2026 compliance section
docs: Restore full Project-Statistics.md with v1.19.0 data Restored original detailed structure (architecture diagram, feature stats, technology stack, benchmarks, etc.) that was accidentally simplified. Updated all numbers to v1.19.0: 217K pure code, 282.8K total, 796 files. Added v1.19.0 row to Statistics History table. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update to v1.19.0 — version refs, audit status, project stats - Home.md: Version 1.16.0 → 1.19.0, audit status updated (0 critical/high) - Configuration-Reference.md: Version refs updated - Performance-Benchmarks.md: Version refs updated - Metrics-Architecture.md: Version refs updated - Suricata-IDS-Integration.md: Version refs updated - Systemd-Units-Overview.md: Version refs updated - NEW: Project-Statistics.md — codebase stats, CI pipeline, security audit Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Add Security CI Pipeline page + Update sidebar - New: Security-CI-Pipeline.md - Comprehensive CI/CD security documentation - 12 security tools documented - Complete workflow matrix - SARIF integration guide - Vulnerability response SLA - Updated: _Sidebar.md - All 25 wiki pages organized by category Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Align all wiki documentation to v1.18.0 Updated version references in: - Architecture-Overview.md - API-Handlers-Map.md - CLI-Command-Tree.md - Health-Check-Architecture.md - Performance-Benchmarks.md - Project-Statistics.md Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update Schema Specification for v1.18.0 unified blacklist - Document all sources routing to unified blacklist - Add CIDR aggregation and source tracking details - Clarify daemon database handles source metadata Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update NFT Schema Validation for v1.18.0 - Remove WRONG/CORRECT comparison format - Show unified NFTBan schema approach - Add full chain definitions with ICMPv6 ND support - Document unified blacklist architecture Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Add firewall rebuild/reset commands and schema protection (v1.17.7) - CLI-Commands-Reference.md: Add firewall subcommands (rebuild, reset) - Health-Check-Architecture.md: Add schema protection section - NFT-Schema-Validation.md: Add issues 6-8 (rogue tables, xt-target, reset)
fix: Align CLI command count to 76 (was incorrectly 54) Actual count: 76 shell commands (cmd_*.sh) + 15 Go commands (cmd_*.go) = 91 total Updated: - Project-Statistics.md (5 occurrences) - Registry-Architecture.md (2 occurrences) CLI-Commands-Reference.md was already correct.
docs: Fix remaining v1.15.0 references to v1.16.0 Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update all documentation to v1.16.0 - OpenSSF 7+ milestone Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
fix(security): Rename CVE-2024-NFTBAN-001 to NFTBan-SA-2024-001 Internal advisory format - not a MITRE-assigned CVE. Added Advisory ID field and fixed date typo (2025→2024). Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs(cli): Update CLI Commands Reference to 76 commands - Updated command count from 54 to 76 commands (verified from code) - Added System & Maintenance section with 8 new commands - Added configaudit, configtest, polkit, flush, firewall-logs, snapshot - Updated documentation to match actual codebase Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update version references to 1.15.0 - Update 9 files from v1.12.6 to v1.15.0 - Remove incorrect NFTBAN_VERSION from example config (version is set automatically, not user-configurable) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Remove deprecated Zabbix 5.x/6.x template references Only Zabbix 7.0+ is now supported. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update port command syntax and Zabbix firewall requirements - CLI-Commands-Reference: New port add syntax with protocol + direction - Metrics-Architecture: Added firewall port requirements for Zabbix - Security-Operations-Guide: Fixed port block syntax New syntax: nftban port add <port> <protocol> <direction> - protocol: tcp | udp | both - direction: in | out | inout Zabbix ports: - 10050 tcp in (passive agent checks) - 10051 tcp out (active agent checks / trapper) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update wiki for email consolidation (v1.13.12) - CLI-Commands-Reference: Add `nftban mail setup` command with options - Configuration-Reference: Add quick setup, notification triggers, and email recipient resolution documentation - Queue-and-Mail-Contract: Add recipient resolution pattern for modules All modules now fall back to NFTBAN_MAIL_RECIPIENT if module-specific override is empty. Quick setup: `nftban mail setup email@example.com --all` Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Add comprehensive performance benchmarks case study - Real netlink throughput measurements (9k-16k elem/sec) - Multi-distro comparison: Ubuntu 24.04, AlmaLinux 9.7 - IPC performance analysis - Scalability limits and recommendations - Architecture validation Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Consolidate project statistics, remove old version sections - Remove v1.9.3 and v1.3.0 feature sections (belong in changelog) - Keep single Statistics History table (removed duplicate Growth table) - Keep Performance Benchmarks table - Fix WEB LAYER count (19,200 → ~4,000) - Remove version from Metrics section header - Remove duplicate See Also link Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update project statistics with accurate counts - Bash: 242 files, ~132,200 lines (61.7%) - Go: 229 files, ~82,000 lines (38.3%) - Total pure code: ~214,200 lines - Git commits: 2,380+ - Update growth table with v1.12.6 stats (2026-02-11) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update version references and remove marketing language - Replace "intelligent" with factual terms (automated, signature-based) - Update version references from v1.10.0/v1.11.0 to v1.12.6 - 9 files updated Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Update version references and project description - Home.md: Add canonical project description, update to v1.12.6 - Home.md: Change local path to GitHub URL - Architecture-Overview.md: Update version to 1.12.6 - Security-Architecture.md: Remove version-specific reference Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs(suricata): Correct memory sizing guide based on strace verification Key corrections: - Memory determined by ring-size, NOT tpacket version - All distros default to tpacket-v2 (verified via strace) - Added memory formula: RAM ≈ ring-size × 2KB × capture_threads - Updated profile table with correct ring-sizes and memory estimates - Added tuning procedure for ring-size optimization Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs(suricata): Add system-level performance tuning guide Document v1.12.6 baseline optimizations and system requirements: - Baseline profile settings (tpacket-v3, mpm-algo, stream.inline, etc.) - irqbalance disable instructions - NIC offloading disable (ethtool commands) - RSS queue tuning for multi-core systems - Memory sizing guide with tpacket-v3 comparison - Verification commands checklist Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
fix(docs): Correct CLI command count to 54 Updated Project-Statistics.md and Registry-Architecture.md to reflect the actual 54 CLI commands from commands.registry.yml Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
docs: Add v1.11.0 module resource metrics section - Added Module Resource Metrics section with 12 new metrics: * Timer modules (feeds, rbl): actual duration/memory/status * Embedded modules (portscan, ddos, geoban): estimated CPU/memory % - Updated Table of Contents Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
fix: Match wiki table format for Alert Routing section