| 9c844b61 | 16-Dec-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blocklist: blacklist: Chase recent upstream changes
Upstream fixed a couple of bugs:
1. Only attempt to restore the blocking rules if the database file
exists. Otherwise, when the service start
blocklist: blacklist: Chase recent upstream changes
Upstream fixed a couple of bugs:
1. Only attempt to restore the blocking rules if the database file
exists. Otherwise, when the service starts for the first time, it
fails (PR 258411).
2. Revert a commit that removed a call to close(bi->bi_fd), preventing
the descriptor from being deleted.
PR: 258411
PR: 291680
MFC after: 1 week
show more ...
|
| 52395203 | 16-Dec-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
MFV: Import blocklist 2025-12-15 (8a4b011)
Merge commit 'bfef098f924950a085927b1e7dd6c6db4e651c5c'
Changes:
https://github.com/zoulasc/blocklist/compare/ff13526...8a4b011
PR: 258411
PR: 291680
MFV: Import blocklist 2025-12-15 (8a4b011)
Merge commit 'bfef098f924950a085927b1e7dd6c6db4e651c5c'
Changes:
https://github.com/zoulasc/blocklist/compare/ff13526...8a4b011
PR: 258411
PR: 291680
MFC after: 1 week
show more ...
|
| e12ec5f4 | 28-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
Revert "blocklist-helper: Silence a bogus pf warning"
This reverts commit 2347ca21d657121670e6e7246c6ac32efc996cac.
A fix has been implemented in 99560fe98c76 ("pfctl: Do not warn if there
is no Et
Revert "blocklist-helper: Silence a bogus pf warning"
This reverts commit 2347ca21d657121670e6e7246c6ac32efc996cac.
A fix has been implemented in 99560fe98c76 ("pfctl: Do not warn if there
is no Ethernet anchor").
Revert this commit to avoid having differences with upstream.
MFC after: 2 days
show more ...
|
| 67ade69e | 26-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blocklistd-helper: Silence another bogus pf warning
It has been reported as PR 290478. In the meantime, just sweep under
the carpet.
It is worth noting that neither commit:
2347ca21d657 ("blocklis
blocklistd-helper: Silence another bogus pf warning
It has been reported as PR 290478. In the meantime, just sweep under
the carpet.
It is worth noting that neither commit:
2347ca21d657 ("blocklist-helper: Silence a bogus pf warning")
nor this one will be upstreamed, as this is a FreeBSD-specific issue.
PR: 290478
MFC after: 2 days
show more ...
|
| eae98e28 | 25-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blocklist: blacklist: Chase recent upstream changes
Upstream introduced an extra column in blocklistctl(8) to display the
name of the rule associated in the database entry.
It is intended to avoid
blocklist: blacklist: Chase recent upstream changes
Upstream introduced an extra column in blocklistctl(8) to display the
name of the rule associated in the database entry.
It is intended to avoid confusion when seemingly duplicate locations
appear in the output of the blocklistctl dump command. Especially when
users are transitioning from the old nomenclature to the new one.
The latest patches will not be fully backported to blacklistctl(8), to
avoid breaking current scripts that may be parsing its output. Also we
are slowly preparing to feature-freeze everything related to blacklist.
MFC: 2 days
show more ...
|
| c6240045 | 13-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blacklist: Avoid duplicate manual pages in METALOG
Previously, blacklist man pages were just a symlink to their blocklist
counterpart, this in turn installed blocklist man pages twice, and
resulted
blacklist: Avoid duplicate manual pages in METALOG
Previously, blacklist man pages were just a symlink to their blocklist
counterpart, this in turn installed blocklist man pages twice, and
resulted in a duplicate error when running metalog_reader.lua -c.
Take advantage of the duplication to document nuances in blacklist, such
as the fact that it uses the new database and socket name (blocklist).
Also, note that it has been renamed to blocklist. In the future, it
will help to document its deprecation.
Approved by: emaste (mentor)
Fixes: 7238317403b9 ("blocklist: Rename blacklist to blocklist")
MFC after: 2 days
show more ...
|
| 2347ca21 | 12-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blocklist-helper: Silence a bogus pf warning
Silence a bogus warning about (an ethernet) anchor not being found.
It has been reported as PR 280516. In the meantime, just sweep under
the carpet.
A
blocklist-helper: Silence a bogus pf warning
Silence a bogus warning about (an ethernet) anchor not being found.
It has been reported as PR 280516. In the meantime, just sweep under
the carpet.
Approved by: emaste (mentor)
MFC after: 2 days
show more ...
|
| 4d56eb00 | 11-Oct-2025 |
Jose Luis Duran <jlduran@FreeBSD.org> |
blocklist: Revert upstream commit ddf6d71
Upstream commit ddf6d71 ("implement BLOCKLIST_BAD_USER as a "one-count"
failure") introduced BLOCKLIST_BAD_USER with a one-count failure
mechanism. BLOCKLI
blocklist: Revert upstream commit ddf6d71
Upstream commit ddf6d71 ("implement BLOCKLIST_BAD_USER as a "one-count"
failure") introduced BLOCKLIST_BAD_USER with a one-count failure
mechanism. BLOCKLIST_AUTH_FAIL was implemented with a two-count failure
mechanism. Since we have been utilizing BLOCKLIST_AUTH_FAIL, the number
of failed attempts now doubles towards the maximum limit (nfails),
giving system administrators the impression that the number of failed
authentication attempts is inaccurate.
Revert this commit until a consensus has been reached. We do not want
to introduce yet another breaking change with the renaming of the
library.
Approved by: emaste (mentor)
MFC after: 2 days
show more ...
|