v0.2.9

Main changes in this release:

• The install script now detects if it's run from a fancy shell, and if a simple ( = faster) shell is available, offers to use it instead
• Improved dialogs in the install script
• Library scripts are now installed into /usr/lib rather than /usr/bin
• The cca2.list file is now installed into /etc/geoip-shell rather than /usr/bin
• Some scripts' names were changed for consistency
• Some dependencies and compatibility checks are now impelemented in a separate script which doesn't get installed or used on OpenWrt
• Main scripts now source the new geoip-shell-init script rather than the -common script

Fixed some minor bugs:

• when running the -install script with the -z (nointeract) option and no secure download utility is available, the -fetch script doesn't honor nointeract
• On some older versions of Busybox, ANSI colors do not get removed from log messages
• cron service detection doesn't work correctly on vanilla Busybox (not OpenWrt)

Full Changelog: v0.2.8...v0.2.9

v0.2.8

Main changes in this release:

• added support for ksh93 and yash shells
• now the shell used to install geoip-shell will be always used by it, rather than /bin/sh
• fixed a bug with ip lists removal
• the config directory is now only readable by root, to improve security
• the -setvars script now gets installed into the config directory, since it stores some potentially sensitive system-specific data
• scripts now use the 'trap' shell built-in to ensure temporary files removal even if they get killed
• improved log messages
• many small improvements to backend functions which collectively should enhance reliability
• implemented checks for compatible shell
• implemented some additional compatibility checks
• improved documentation

Full Changelog: v0.2.7...v0.2.8

v0.2.7

The recent rapid development has created a few bugs which this release hopefully fixes.

Bugs fixed:

• Automatic update of ip lists not working with iptables installs
• Custom cron schedule validation not working
• LAN subnets autodetection not working when run from an autoupdate
• Some log messages not getting logged

In addition, lock file management has been improved.

Full Changelog: v0.2.6...v0.2.7

v0.2.6

Main changes in this release:

• added OpenWrt-specific README.md
• updated documentation
• install: only copy the detect-lan script if LAN autodetection is enabled
• install: improved usage() function
• run: when not in manual mode, always log on start and on exit
• common: use specific logger facilities, depending on error level
• owrt-fw-include: don't call -run if the lock exists
• install: check root after processing arguments
• manage: check root after processing arguments

Full Changelog: v0.2.5...v0.2.6

v0.2.5

Main changes in this release:

• The install script now supports fully interactive mode where no command line arguments need to be passed
• The install script now also supports fully non-interactive mode where no questions are asked (but it fails if required args are not passed)
• LAN subnets can now be specified regardless of whether geoip rules are applied to specific interfaces or not
• Independently of LAN subnets, implemented support for specifying trusted subnets to exclude from geoip blocking
• Some backend functions have been made more robust

Full Changelog: v0.2.4.1...v0.2.5

v0.2.4.1

This is a minor bugfix release. Fixes an issue with installing with option -s disable on OpenWrt.

Full Changelog: v0.2.4...v0.2.4.1

v0.2.4

This is a fairly big release with following main changes:

• Implemented lock file support for the -run and -backup scripts (should avoid race conditions)
• Implemented support in the -run script to work sort of like a daemon, a.k.a to run in the background and in case of a failure to fetch or apply ip lists, make multiple retries till it succeeds or exceeds the max retry count
• Call the -run script in daemon mode from cron jobs and from the OpenWrt firewall include script
• On reset and uninstall, kill related processes and remove the lock
• Fixed a regression with geochain on/off state detection
• Fixed a regression with ports setting not working with nftables
• Compacted a lot of code

Full Changelog: v0.2.3...v0.2.4

v0.2.3

For this release, I restructured some of the code and renamed multiple scripts so names now better reflect each script's function. The validate-cron-schedule.sh script got integrated into the cronsetup script. Also a bug has been fixed for OpenWrt where under fault conditions, the firewall include could cause the system to hang for a long time at boot.

Full Changelog: v0.2.2...v0.2.3

v0.2.2

First release supporting both iptables and nftables. So no more separate branches.
Of course, merging the 2 branches makes for a fairly large release with tons of changes under the hood.

Full Changelog: v0.2.1-nftables...v0.2.2

v0.2.1-nftables

This is a fairly big release, implementing complete support for OpenWrt (currently only the nftables-based installs are supported, iptables support will be implemented soon'ish). Also lots of under-the-hood stuff has been changed and improved, including the usage() functions in several scripts, error and console messages. Much of the code has been compacted.

Full Changelog: v0.2.0-nftables...v0.2.1-nftables