tomasz-c/nft-blackhole v1.4.0

on GitHub

Added

• Configurable country IP list source (COUNTRY_LIST_SOURCE option) - choose between ipverse (default) and ipdeny for country IP block lists a21fbc7

Fixed

• Reload action now checks if the nftables chain exists and recreates the full table structure when missing - fixes the case where nft list chain inet blackhole input fails after a system reboot without network access 8755103
• Added Requires=nft-blackhole.service to nft-blackhole-reload.service - systemd now ensures the main service is active before attempting reload, preventing failures when the table was never created due to lack of internet 8755103

Changed

• Default country IP list source changed from ipdeny to ipverse - ipdeny enforces download request limits which caused failures when blocking a large number of countries (#15)
• Renamed get_country_ip_list() → get_country_ip_list_ipverse(), get_country_ip_list2() → get_country_ip_list_ipdeny() for clarity
• Improved regex filtering of comment lines in downloaded lists
• Updated README credits with current data sources

Full Changelog: v1.3.0...v1.4.0