# banIP support thread **URL:** \ **Category:** Community Builds, Projects & Packages\ **Created:** [July 13, 2018, 3:36pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985 "2018-07-13T15:36:25Z")\ **Posts on this page:** 20\ **Page:** 1
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [July 13, 2018, 3:36pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/1 "2018-07-13T15:36:25Z")
Hi, in OpenWrt snapshot package repo you'll find the banIP package: > latest snapshot version: [banIP 1.9.1-5](https://downloads.openwrt.org/snapshots/packages/x86_64/packages/) plus [luci companion package 1.9.1-3](https://downloads.openwrt.org/snapshots/packages/x86_64/luci/) > stable OpenWrt version 25.12.x.: [banIP 1.9.1-5](https://downloads.openwrt.org/releases/packages-25.12/x86_64/packages/) plus [luci companion package 1.9.1-3](https://downloads.openwrt.org/releases/packages-25.12/x86_64/luci/) > Link to the latest [banIP documentation](https://github.com/openwrt/packages/blob/master/net/banip/README.md) > Link to the latest [banIP changelog](https://github.com/openwrt/packages/commits/master/net/banip) Feel free to test, ask questions or make suggestions. Have fun! Dirk ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [July 13, 2018, 3:42pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/2 "2018-07-13T15:42:37Z")
Intentionally left blank - for future use! 😉 ---
**Author:** ![tmomas](https://forum.openwrt.org/letter_avatar/tmomas/32/5_5575768a8748004e209b776fc1b2916d.png) [@tmomas](https://forum.openwrt.org/u/tmomas)\ **Post date:** [July 13, 2018, 6:26pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/4 "2018-07-13T18:26:16Z")
> [@dibdot](#): > > intended for current snapshot release level Can you precise that "current"? Will this be true even in 2 years time from now? I'm coming from the OpenWrt wiki, where many "current" or "currently" are heavily outdated, years after they have been added and never got removed again... ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [July 13, 2018, 6:51pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/5 "2018-07-13T18:51:11Z")
> [@tmomas](#): > > Can you precise that "current"? Notably the LuCI frontend part requires the latest changes in master, which are not in 17.x or 18.x branch. ---
**Author:** ![gr1m](https://forum.openwrt.org/user_avatar/forum.openwrt.org/gr1m/32/1789_2.png) [@gr1m](https://forum.openwrt.org/u/gr1m)\ **Post date:** [July 13, 2018, 8:18pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/6 "2018-07-13T20:18:39Z")
I've been using firehol's ipset lists for some time, finally someone made a frontend for that. Unfortunately there's no IPv6 here. D: I'll add your packages to my next build. Thank you. ---
**Author:** ![Bartvz](https://forum.openwrt.org/user_avatar/forum.openwrt.org/bartvz/32/787_2.png) [@Bartvz](https://forum.openwrt.org/u/Bartvz)\ **Post date:** [July 15, 2018, 2:42pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/7 "2018-07-15T14:42:44Z")
@dibdot finally a project like sub2rbl but with a LuCI frontend for OpenWRT. Quick question, how is the ram usage with ipsets? Also, tiny nitpick, it is ransomware, not ransomeware. Thank you! ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [July 16, 2018, 6:13am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/8 "2018-07-16T06:13:14Z")
> [@Bartvz](#): > > Quick question, how is the ram usage with ipsets? On the netfilter mailing list I found this calculation formula: [https://www.spinics.net/lists/netfilter/msg56265.html](https://www.spinics.net/lists/netfilter/msg56265.html) banIP always tries to start with a very small hashsize. Anyway, the kernel rounds this up to the first (lowest) valid hashsize during ipset creation. Compared to dns level blocking the RAM usage is very low. ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 1, 2018, 5:41am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/9 "2018-08-01T05:41:28Z")
@dibdot thanks for this, looks really useful. I installed and all seems to work except blocking by iso country codes, anything I can do to tweak/test? Also, I seem my subnet has been auto-added to white list, should it be there? Or does that disable banip on my network? ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 1, 2018, 6:16am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/10 "2018-08-01T06:16:11Z")
> [@cantenna](#): > > except blocking by iso country codes Please provide debug logs - thanks! > [@cantenna](#): > > my subnet has been auto-added to white list That's the intended behaviour to keep your uplink/subnet always accessible. > [@cantenna](#): > > anything I can do to tweak/test? IPv6 testing/feedback would be fine! 😉 ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 1, 2018, 12:23pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/11 "2018-08-01T12:23:39Z")
> [@dibdot](#): > > auto-add unsuccessful ssh login attempts to local blacklist Did some more testing; "auto-add unsuccessful ssh login attempts to local blacklist" this feature seems to be non-functional as well for me. Regarding "except blocking by iso country codes" in situations where multiple countries are added, the most recently added country, seems to be the only one blocked. ```plaintext Wed Aug 1 22:20:25 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: country, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 8711/0/8711, time(s): 12 Wed Aug 1 22:20:25 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: country_6, mode: create, settype: net, setipv: inet6, ruletype: src+dst, count(sum/ip/cidr): 1771/0/1771, time(s): 12 Wed Aug 1 22:20:25 2018 user.info banIP-[0.0.1]: 18 IPSets with overall 165102 IPs/Prefixes loaded successfully (Linksys WRT1900ACS, Cantenna_22-06-18 v.1.15- Lede SNAPSHOT r6865+1-419238f) Wed Aug 1 22:20:25 2018 user.debug banIP-[0.0.1]: f_jsnup ::: status: enabled, setcnt: 18, cnt: 165102 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_jsnup ::: status: running, setcnt: 0, cnt: 0 Wed Aug 1 22:20:46 2018 user.info banIP-[0.0.1]: start banIP processing (start) Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: fetch_util: /usr/bin/curl (built-in), iface: lan, dev: br-lan, mem_total: 511, mem_free: 336, max_queue: 32 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: -, mode: initial, chain: banIP, ruleset: input_wan_rule forwarding_wan_rule input_lan_rule forwarding_lan_rule, ruleset_6: input_wan_rule forwarding_wan_rule input_lan_rule forwarding_lan_rule Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: whitelist, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: whitelist_6, src_on: 0 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: whitelist_6, mode: flush Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: blacklist, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: blacklist_6, src_on: 0 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: blacklist_6, mode: flush Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: tor, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: threat, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: debl, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: debl_6, src_on: 0 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: debl_6, mode: flush Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: blacklist, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 0/0/0, time(s): 0 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: myip, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: myip_6, src_on: 0 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: myip_6, mode: flush Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: bogon, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: bogon_6, src_on: 1 Wed Aug 1 22:20:46 2018 user.debug banIP-[0.0.1]: f_main ::: name: yoyo, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: zeus, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: sslbl, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: ransomeware, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: feodo, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: dshield, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: proxy, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: iblocklist, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: drop, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: drop_6, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: drop_6, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: edrop, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: firehol1, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: whitelist, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 1/0/1, time(s): 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: firehol1, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: firehol2, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: firehol2, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: firehol3, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: firehol3, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: firehol4, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: firehol4, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: country, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: country_6, src_on: 1 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: asn, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: asn, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_main ::: name: asn_6, src_on: 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: asn_6, mode: flush Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: iblocklist, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 0/0/0, time(s): 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: edrop, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 112/0/112, time(s): 0 Wed Aug 1 22:20:47 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: dshield, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 20/0/20, time(s): 0 Wed Aug 1 22:20:48 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: threat, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 2412/1567/845, time(s): 2 Wed Aug 1 22:20:50 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: drop, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 825/0/825, time(s): 3 Wed Aug 1 22:20:50 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: ransomeware, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 304/304/0, time(s): 3 Wed Aug 1 22:20:50 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: zeus, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 108/108/0, time(s): 3 Wed Aug 1 22:20:50 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: feodo, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 1464/1464/0, time(s): 3 Wed Aug 1 22:20:50 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: proxy, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 2749/2749/0, time(s): 3 Wed Aug 1 22:20:51 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: yoyo, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 11843/11843/0, time(s): 5 Wed Aug 1 22:20:51 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: sslbl, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 99/99/0, time(s): 4 Wed Aug 1 22:20:51 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: tor, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 920/920/0, time(s): 5 Wed Aug 1 22:20:52 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: bogon, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 3239/0/3239, time(s): 6 Wed Aug 1 22:20:52 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: myip, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 3692/3692/0, time(s): 6 Wed Aug 1 22:20:52 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: debl, mode: create, settype: ip, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 27287/27287/0, time(s): 6 Wed Aug 1 22:20:56 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: country_6, mode: create, settype: net, setipv: inet6, ruletype: src+dst, count(sum/ip/cidr): 1771/0/1771, time(s): 9 Wed Aug 1 22:20:58 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: country, mode: create, settype: net, setipv: inet, ruletype: src+dst, count(sum/ip/cidr): 8711/0/8711, time(s): 11 Wed Aug 1 22:20:59 2018 user.debug banIP-[0.0.1]: f_ipset ::: name: bogon_6, mode: create, settype: net, setipv: inet6, ruletype: src+dst, count(sum/ip/cidr): 99545/0/99545, time(s): 13 Wed Aug 1 22:20:59 2018 user.info banIP-[0.0.1]: 18 IPSets with overall 165102 IPs/Prefixes loaded successfully (Linksys WRT1900ACS, Cantenna_22-06-18 v.1.15- Lede SNAPSHOT r6865+1-419238f) Wed Aug 1 22:20:59 2018 user.debug banIP-[0.0.1]: f_jsnup ::: status: enabled, setcnt: 18, cnt: 165102 ``` ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 1, 2018, 12:42pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/12 "2018-08-01T12:42:44Z")
> [@cantenna](#): > > Did some more testing; "auto-add unsuccessful ssh login attempts to local blacklist" this feature seems to be non-functional as well for me. Thanks for testing! 😉 What's your testcase? Currently only lines like below will be auto-added (whenever you've reached the max-attempts): ` Exit before auth (user 'root', 3 fails): Max auth tries reached - user 'root' from 10.168.1.103:53372` Regarding iso codes: which country codes did you use for testing? Thanks again! ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 1, 2018, 8:01pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/13 "2018-08-01T20:01:02Z")
> [@cantenna](#): > > Regarding "except blocking by iso country codes" in situations where multiple countries are added, the most recently added country, seems to be the only one blocked. confirmed & fixed with the next update (same bug applied to dynamic ASN IPsets, too) - thanks! ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 1, 2018, 8:47pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/14 "2018-08-01T20:47:16Z")
(sorry for late reply, was asleep) I use ssh key+pass dropbear. Country codes DE, RU, CN But I see you made progress anyways 😉 Looking forward to you next update. ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 2, 2018, 8:12am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/15 "2018-08-02T08:12:15Z")
> [@cantenna](#): > > I use ssh key+pass dropbear. Could you please send me a logfile/logread excerpt from the intentionally failed login via PM? Thanks! ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 2, 2018, 10:22am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/16 "2018-08-02T10:22:26Z")
> [@dibdot](#): > > > I use ssh key+pass dropbear. > > Could you please send me a logfile/logread excerpt from the intentionally failed login via PM? > > Thanks! @cantenna I've reproduced & fixed that issue, too. I need no further logs ... thanks. ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 2, 2018, 3:28pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/17 "2018-08-02T15:28:21Z")
banIP v 0.0.2 is now in my google drive folder (see first post), with the following changes: - fix auto-add function of failed ssh logins - fix dynamic ASN & Country IPSet creation where multiple sources are selected - fix "ransomware" typo - updated LuCI components - should work with 18.06 release & latest snapshots Please remove the old version before you update and reset the LuCI cache (rm -rf /tmp/luci-\*) Happy testing! 😉 ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 2, 2018, 5:18pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/18 "2018-08-02T17:18:28Z")
Literally just working on getting that log to you now, came here to double check what you were asking for again. Awesome that you got it done anyways. Will give the update a go, thanks again:) ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 3, 2018, 3:58am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/19 "2018-08-03T03:58:46Z")
Thanks for the update. Country block does seem to work but for some reason, occasionally after a reboot, country ipset fails to be known to banip i.e.) Country is missing from IPSet-Lookup. EDIT: increasing/adding trigger delay of 10 seconds seems to have helped Haven't tested ssh block yet, will do next. Is it possible to o stuff via console? I know it's early days. ---
**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\ **Post date:** [August 3, 2018, 11:59am UTC](https://forum.openwrt.org/t/banip-support-thread/16985/20 "2018-08-03T11:59:23Z")
> [@cantenna](#): > > occasionally after a reboot, country ipset fails to be known to banip i.e.) Check the debug log regarding failed downloads ... usually you can fine tune this with a reduced number of parallel processes (you've raised this to 32 if I remember right 😉 ) plus a higher trigger delay (default: 2). > [@cantenna](#): > > Is it possible to o stuff via console? `/etc/init.d/banip start` to refresh your IPSets ... or did you mean something different!? ---
**Author:** ![cantenna](https://forum.openwrt.org/user_avatar/forum.openwrt.org/cantenna/32/4463_2.png) [@cantenna](https://forum.openwrt.org/u/cantenna)\ **Post date:** [August 3, 2018, 2:13pm UTC](https://forum.openwrt.org/t/banip-support-thread/16985/21 "2018-08-03T14:13:51Z")
That's great. Wasn't sure if restart would be same as refresh, thanks again, really useful package for LEDE [Next page](https://forum.openwrt.org/t/banip-support-thread/16985.md?page=2)