v0.3.0.1

This is a hotfix release for v0.3, fixing ANSI colors not removed correctly from syslog entries.

Full Changelog: v0.3...v0.3.0.1

v0.3

This release brings some new features and enhancements:

• Now it is possible to specify individual ip's or subnets (rather than just subnets) for LAN and for trusted ip's.
• the geoip-shell status command now reports actual elements of the LAN ip's and trusted ip's in the firewall ipsets (rather than just printing the config)
• The main scripts now report the version of geoip-shell when run with the -h option.

Full Changelog: v0.2.9.2...v0.3

v0.2.9.2

The -install script was getting too big and slightly chaotic, so in this release I split the new '-lib-setup' script out of it and cleaned up the code. I'm planning to implement support in the -manage script for changing settings that are currently only settable during installation, so the -lib-setup script should be useful for that as well.

An additional minor change is that the config for protocols-ports is now stored in a unified format, rather than in backend (iptables/nftables) specific format, and the -lib-apply-nft and -lib-apply-ipt scripts parse it into backend-specific format. This means that if you have protocols-ports settings and you upgrade from iptables to nftables, geoip-shell should not break.

Also fixed a potential bug related to OpenWrt.

Full Changelog: v0.2.9.1...v0.2.9.2

v0.2.9.1

This is a hotfix for v0.2.9. I wasn't completely happy with the way scripts initialization was working, and this release finally has it as it should be.

Full Changelog: v0.2.9...v0.2.9.1

v0.2.9

Main changes in this release:

• The install script now detects if it's run from a fancy shell, and if a simple ( = faster) shell is available, offers to use it instead
• Improved dialogs in the install script
• Library scripts are now installed into /usr/lib rather than /usr/bin
• The cca2.list file is now installed into /etc/geoip-shell rather than /usr/bin
• Some scripts' names were changed for consistency
• Some dependencies and compatibility checks are now impelemented in a separate script which doesn't get installed or used on OpenWrt
• Main scripts now source the new geoip-shell-init script rather than the -common script

Fixed some minor bugs:

• when running the -install script with the -z (nointeract) option and no secure download utility is available, the -fetch script doesn't honor nointeract
• On some older versions of Busybox, ANSI colors do not get removed from log messages
• cron service detection doesn't work correctly on vanilla Busybox (not OpenWrt)

Full Changelog: v0.2.8...v0.2.9

v0.2.8

Main changes in this release:

• added support for ksh93 and yash shells
• now the shell used to install geoip-shell will be always used by it, rather than /bin/sh
• fixed a bug with ip lists removal
• the config directory is now only readable by root, to improve security
• the -setvars script now gets installed into the config directory, since it stores some potentially sensitive system-specific data
• scripts now use the 'trap' shell built-in to ensure temporary files removal even if they get killed
• improved log messages
• many small improvements to backend functions which collectively should enhance reliability
• implemented checks for compatible shell
• implemented some additional compatibility checks
• improved documentation

Full Changelog: v0.2.7...v0.2.8

v0.2.7

The recent rapid development has created a few bugs which this release hopefully fixes.

Bugs fixed:

• Automatic update of ip lists not working with iptables installs
• Custom cron schedule validation not working
• LAN subnets autodetection not working when run from an autoupdate
• Some log messages not getting logged

In addition, lock file management has been improved.

Full Changelog: v0.2.6...v0.2.7

v0.2.6

Main changes in this release:

• added OpenWrt-specific README.md
• updated documentation
• install: only copy the detect-lan script if LAN autodetection is enabled
• install: improved usage() function
• run: when not in manual mode, always log on start and on exit
• common: use specific logger facilities, depending on error level
• owrt-fw-include: don't call -run if the lock exists
• install: check root after processing arguments
• manage: check root after processing arguments

Full Changelog: v0.2.5...v0.2.6

v0.2.5

Main changes in this release:

• The install script now supports fully interactive mode where no command line arguments need to be passed
• The install script now also supports fully non-interactive mode where no questions are asked (but it fails if required args are not passed)
• LAN subnets can now be specified regardless of whether geoip rules are applied to specific interfaces or not
• Independently of LAN subnets, implemented support for specifying trusted subnets to exclude from geoip blocking
• Some backend functions have been made more robust

Full Changelog: v0.2.4.1...v0.2.5

v0.2.4.1

This is a minor bugfix release. Fixes an issue with installing with option -s disable on OpenWrt.

Full Changelog: v0.2.4...v0.2.4.1