v0.4.6

Main changes in this release:

• the -k option in the -install script (for noblock) has been replaced by the -N option
• the -e option in the -install script (for nft sets optimization policy) has been replaced by the -O option. The -O option now requires an argument <memory|performance>. The defaults stayed the same (optimizes for memory by default).
• the -manage script now supports changing nft sets optimization policy after installation via this command: geoip-shell configure -O <memory|performance>.
• the configure action in the -manage script now supports the -z option for fully non-interactive setup.
• some improvements to arguments parsing in the -lib-setup script.
• improved usage() functions output in the -install and -manage scripts
• when updating an OpenWrt package, the new version now runs the -manage script in non-interactive mode which automatically picks up existing config and sets up geoip blocking without requiring to manually run geoip-shell configure.
• improvements in the OpenWrt makefile and in the mk-owrt-package script for much faster compilation and hopefully better compliance with OpenWrt standards (I'm about to submit the package to OpenWrt).

Full Changelog: v0.4.5...v0.4.6

v0.4.5

Main changes in this release:

• geoip-shell now tolerates conditions where the config file is lost and helps the user to recreate it, rather than dying with an error
• on OpenWrt, updating the package now doesn't reset the config (when updating from a version earlier than v0.4.5, the config will still get reset)
• Cron jobs are now created and removed more efficiently
• Fixed a bug with the record of last successful update time getting lost under certain conditions
• Improved some console and log messages
• Updated documentation

Full Changelog: v0.4.4...v0.4.5

v0.4.4

Main changes in this release:

• the -install script now supports specifying the firewall backend (iptables or nftables)
• the configure action in the -manage script now supports changing the firewall backend after installation
  (both of the above options are not supported on OpenWrt)
• the OpenWrt packages are now configured correctly with some settings which were missing in previous releases
• Fixed installation on OpenWrt via the -install script
• Additional minor bug fixes

Full Changelog: v0.4.3.1...v0.4.4

v0.4.3.1

Main changes in this release:

• the -manage script's configure action now supports additional options: -f <families> and -r <user_country_code>
• the library directory was changed from /usr/lib to /usr/lib/geoip-shell
• fixed a bug with validation of country codes under some conditions

Full Changelog: v0.4.3...v0.4.3.1

v0.4.3

Main changes in this release:

• Improved firewall rules order (now the icmpv6 and dhcpv6 rules are always processed before ipsets)
• The status report now includes last successful update date and time
• Improved usage() output in multiple scripts
• Refinements in installation and setup
• In particular, faster initial setup for iptables-based OpenWrt systems

Full Changelog: v0.4.2...v0.4.3

v0.4.2

This release fixes a regression with LAN subnets not being stored in config and an additional minor bug with the lib-setup script. I think we're done with bugs for now.

There are some additional changes with OpenWrt builds:

• debug-related code is now stripped from the scripts when compiling OpenWrt packages to reduce their size somewhat
• Fixed a minor bug with firewall being restarted twice when uninstalling
• The package for iptables-based OpenWrt systems will now refuse to install when detecting firewall4, in order to avoid dependency problems
• Some improvements in the mk-owrt-package.sh script which are mainly interesting to myself

Also a bit of code maintenance has been done in almost all scripts.

Full Changelog: v0.4.1...v0.4.2

v0.4.1

This release fixes a bug with the iptables version where the rule for the loopback interface was being created when network interfaces were specified, rather than the other way around.

In addition (for both the nftables and the iptables version), now when network interfaces are specified, 2 extra accept rules are created for traffic arriving via the selected interfaces: one which accepts all link-local connections (from fe80::/8), and another one which accepts DHCPv6 advertisements from upstream (udp port 546). This should solve some possible issues with communication between the device and the upstream router.

Full Changelog: v0.4.0.1...v0.4.1

v0.4.0.1

This release fixes several bugs which crept in during the recent accelerated development.

Bugs fixed:

• the 'remove' action in the manage script errors out
• restore from backup not working on iptables-based systems
• in some edge cases, config gets written to file despite not having changed

In addition, scripts initialization logic has been improved, and the mk-owrt-package script now supports building openwrt packages for both iptables and nftables -based systems in one command.

Full Changelog: v0.4...v0.4.0.1

v0.4

This is a rather big release featuring the following main changes:

• Implemented full support for installation on OpenWrt via an ipk package.
• Packages for OpenWrt are now provided in Releases.
• A lot of internal functions have been improved.
• The -manage script no longer supports actions 'apply' and 'schedule'. The new action 'configure' replaces both of them. Same options which were applicable to 'apply' and 'schedule' now work with the 'configure' action.
• A new -lib-uninstall script has been split out of the existing -uninstall script.
• The new -owrt-uninstall script has been added which serves as a helper script for uninstalling ipk packages on OpenWrt.
• The new mk-owrt-package script has been added which automates ipk package creation.
• Several improvements to the logic behind the configure action in the -manage script which fix certain bugs which were affecting the now-defunct apply action.
• Improved user input validation in interactive setup (applies to the -install and -manage scripts).
• Improved usage() output across several scripts
• Improved status output (which you see when using the geoip-shell status command)
• Updated documentation

Full Changelog: v0.3.4...v0.4

v0.3.4

Main changes in this release:

• implemented comparison of old and new config and status files. if either did not change, it will not get re-written. this applies to multiple scripts working with config and status files, including the backup/restore scripts
• the -manage script now supports changing the datadir and the 'nobackup' setting via the apply action
• the -manage script now checks for lockout conditions when changing country codes via the apply action
• the status report now says whether automatic backup is on or off
• fixed a minor bug with the backup script using incorrect file extension for backup files with iptables systems (on nftables systems the extensions were already correct)

Full Changelog: v0.3.3...v0.3.4