Skip to content

v1.4.0

Latest

Choose a tag to compare

@tomasz-c tomasz-c released this 29 May 21:26

Added

  • Configurable country IP list source (COUNTRY_LIST_SOURCE option) - choose between ipverse (default) and ipdeny for country IP block lists a21fbc7

Fixed

  • Reload action now checks if the nftables chain exists and recreates the full table structure when missing - fixes the case where nft list chain inet blackhole input fails after a system reboot without network access 8755103
  • Added Requires=nft-blackhole.service to nft-blackhole-reload.service - systemd now ensures the main service is active before attempting reload, preventing failures when the table was never created due to lack of internet 8755103

Changed

  • Default country IP list source changed from ipdeny to ipverse - ipdeny enforces download request limits which caused failures when blocking a large number of countries (#15)
  • Renamed get_country_ip_list()get_country_ip_list_ipverse(), get_country_ip_list2()get_country_ip_list_ipdeny() for clarity
  • Improved regex filtering of comment lines in downloaded lists
  • Updated README credits with current data sources

Full Changelog: v1.3.0...v1.4.0