mirror of
https://github.com/openwrt/packages.git
synced 2026-05-31 06:51:51 +08:00
Dirk Brenken
faeecaeb14
* bugfix: only load the configuration once per run: a new `ban_confload` guard short-circuits `f_conf()` on subsequent calls, avoiding repeated `config_load` invocations * new: the per-set report now sorts elements by their packet counter in descending order before truncating to the top 50, so the report shows the most active elements instead of just the first 50 found Signed-off-by: Dirk Brenken <dev@brenken.org>
75 lines
2.0 KiB
Makefile
75 lines
2.0 KiB
Makefile
# banIP - ban incoming and outgoing IPs via named nftables Sets
|
|
# Copyright (c) 2018-2026 Dirk Brenken (dev@brenken.org)
|
|
# This is free software, licensed under the GNU General Public License v3.
|
|
|
|
include $(TOPDIR)/rules.mk
|
|
|
|
PKG_NAME:=banip
|
|
PKG_VERSION:=1.8.8
|
|
PKG_RELEASE:=5
|
|
PKG_LICENSE:=GPL-3.0-or-later
|
|
PKG_MAINTAINER:=Dirk Brenken <dev@brenken.org>
|
|
|
|
include $(INCLUDE_DIR)/package.mk
|
|
|
|
define Package/banip
|
|
SECTION:=net
|
|
CATEGORY:=Network
|
|
TITLE:=banIP blocks IPs via named nftables Sets
|
|
DEPENDS:=+jshn +jsonfilter +firewall4 +gawk +ca-bundle +rpcd +rpcd-mod-rpcsys
|
|
PKGARCH:=all
|
|
endef
|
|
|
|
define Package/banip/description
|
|
banIP blocks IPs via named nftables Sets.
|
|
banIP supports many IP blocklist feeds and provides a log service to block suspicious IPs in realtime.
|
|
Please see https://github.com/openwrt/packages/blob/master/net/banip/files/README.md for further information.
|
|
|
|
endef
|
|
|
|
define Package/banip/conffiles
|
|
/etc/config/banip
|
|
/etc/banip/banip.allowlist
|
|
/etc/banip/banip.blocklist
|
|
/etc/banip/banip.custom.feeds
|
|
endef
|
|
|
|
define Build/Prepare
|
|
endef
|
|
|
|
define Build/Configure
|
|
endef
|
|
|
|
define Build/Compile
|
|
endef
|
|
|
|
define Package/banip/install
|
|
$(INSTALL_DIR) $(1)/usr/bin
|
|
$(INSTALL_BIN) ./files/banip-service.sh $(1)/usr/bin
|
|
|
|
$(INSTALL_DIR) $(1)/etc/init.d
|
|
$(INSTALL_BIN) ./files/banip.init $(1)/etc/init.d/banip
|
|
|
|
$(INSTALL_DIR) $(1)/usr/lib
|
|
$(INSTALL_DATA) ./files/banip-functions.sh $(1)/usr/lib
|
|
|
|
$(INSTALL_DIR) $(1)/etc/config
|
|
$(INSTALL_CONF) ./files/banip.conf $(1)/etc/config/banip
|
|
|
|
$(INSTALL_DIR) $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.tpl $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.allowlist $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.blocklist $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.countries $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.feeds $(1)/etc/banip
|
|
$(INSTALL_CONF) ./files/banip.custom.feeds $(1)/etc/banip
|
|
|
|
$(INSTALL_DIR) $(1)/www/cgi-bin
|
|
$(INSTALL_BIN) ./files/banip.cgi $(1)/www/cgi-bin/banip
|
|
|
|
$(INSTALL_DIR) $(1)/etc/uci-defaults
|
|
$(INSTALL_BIN) ./files/95-banip-housekeeping $(1)/etc/uci-defaults
|
|
endef
|
|
|
|
$(eval $(call BuildPackage,banip))
|