################################################################### # pf-badhost 0.4 Release Notes / Changelog # Copyright 2020 Jordan Geoghegan ################################################################### # Changelog * pf-badhost goes portable! Supported OS now include: * OpenBSD * FreeBSD * DragonflyBSD * NetBSD * MacOS * Improved customizability -- Added a "User Configuration Area" to the script to allow users to easily enable features and/or add custom lists or rules to their blocklist * IPv6 subnet aggregation support added * Added IPv4 and IPv6 Bogon filters * Be extra paranoid -- have ftp(1) output to stdout to allow it to drop all disk/filesytem pledges, which creates a stronger form of unveil (unveil returns ENOENT, whereas pledge will kill ftp(1) if it tries to access the disk) * Script now calculates total number of IP addresses contained within the blocklist, and prints the result. * Numerous correctness and error handling improvements * Rewrote IPv6 address validator as POSIX regular expression * Removed Perl as a mandatory dependency * Geoblocking now pulls data directly from ARIN, APNIC etc Fun Facts: During development of this release of pf-badhost, 2 cheeky bugs were found in awk and grep. Links below: https://github.com/onetrueawk/awk/pull/80 https://marc.info/?l=openbsd-misc&m=159298323627881&w=2