Skip to content

v0.6.1

Latest
Compare
Choose a tag to compare
@friendly-bits friendly-bits released this 13 Nov 05:38

This is another fairly big release, featuring the following main changes:

  • Fix a regression introduced in v0.6.0 which caused the -fetch script to not not use the built-in feature of comparing entries counts between the fetched list for each country code and the previous list, and avoid using a list where the count dropped significantly
  • Fix a regression introduced in v0.6.0 which caused the nftables or iptables rule counters to not be preserved when updating the ip lists under some circumstances
  • Simplify logic and improve error handling in the -run script
  • Simplify logic and improve error handling in the -manage script
  • Fix a regression introduced in v0.6.0 which caused firewall rules coherence check to be performed 3 times after certain actions
  • Fix incorrect permissions set for the config file and the backup files
  • Fix check-ip-in-source not working unless run from the distribution directory
  • Improve error handling in the -install script
  • In whitelist mode, always allow DHCP-related communication to/from private ip ranges (limited to DHCP-specific ports) for both ipv4 and ipv6 (only ipv6 was allowed previously)
  • In whitelist mode, always allow ipv4 link-local addresses (only ipv6 link-local addresses were allowed previously) - thanks @genekellyjr for reporting the issue.
  • Now link-local addresses, LAN addresses (if configured) and trusted addresses (if configured) are combined in one ipset and only one rule is created for the combined set, per geoblocking direction and ip family
  • The geoip-shell status command now reports allowed addresses (the 3 categories above combined) separately for each geoblocking direction
  • The -detect-lan script has been reworked into a library. LAN subnets detection is now performed more efficiently
  • Update and improve documentation

Full Changelog: v0.6.0...v0.6.1