Thank you everyone who helped me with my project

Hi folks,

This is just to say a big thank you to everyone who gave me a hand recently with my geoip project. It took a few months to convert it from Bash to Ash, implement ipv6 and nftables support, get rid of the extra dependencies, figure out the UCI and procd and the OpenWrt firewall, and now it finally runs on OpenWrt, which I'm very excited about.

There is some more work to do as it currently only supports nftables and I want to re-add support for the older iptables installs. Once that's done, I'll announce it in the Community section.

If anyone wants to do some early testing, let me know (the code has been well-tested on a generic Linux system at this point, and I'm pretty sure that it won't break anything badly on OpenWrt, but it may still have some bugs which don't pop up in my setup).

4 Likes

Congrats and thanks, very useful add-on.

1 Like

Here is a little preview of the status report running on my OpenWrt VM (with some random country codes).

image

2 Likes

The verbose status also parses the nftables rules in the geoip chain into a more human-readable format and counts the ip ranges.

Firewall4 with nftables is already in OpenWrt 23.05 and also in the being-phased-out 22.03, so iptables is not needed by any current OpenWrt.

Thus the real need for iptables support is likely rather small , I think.

1 Like

I think probably not everyone wants/feels the need or even can update (because of hardware limitations etc). In my github repo, I see that by statistics, people attend the iptables branch at least as much as the nftables one. Since I already have the code in place, I think I'll integrate the 2 branches and this will support those people with legacy installs.

Update: I feel at this point that the project is ready and safe for the general use (which doesn't mean there are no bugs...), so I announced it in the community section. Anyone curious is welcome to take a look. Big thanks again to everyone who helped!

Geoip-shell: user-friendly and flexible geoip blocker for Linux, now supports OpenWrt

2 Likes