midefos 03a52925d4 feat: migrate ban_ip/unban_ip to ipset ...

- New ipset.rs module wrapping ipset binary (hash:ip backend)
- ban_ip() and unban_ip() use ipset.add/del instead of per-IP iptables rules
- get_banned_ips() parses ipset list -json
- Optional timeout via BAN_DURATION_SECS (default 3600s = 1h)
- Auto-installs single iptables rule: -m set --match-set banned src -j DROP
- New CLI subcommands: ban-ip, unban-ip (with --timeout)
- 13 unit tests for ipset module + integration test script using netns
- Update Woodpecker CI to install ipset

2026-08-31 00:08:21 +02:00

..

cli.rs

feat: migrate ban_ip/unban_ip to ipset

2026-08-31 00:08:21 +02:00

ipset.rs

feat: migrate ban_ip/unban_ip to ipset

2026-08-31 00:08:21 +02:00

lib.rs

feat: migrate ban_ip/unban_ip to ipset

2026-08-31 00:08:21 +02:00

main.rs

feat: migrate ban_ip/unban_ip to ipset

2026-08-31 00:08:21 +02:00

martillo_maldito.rs

feat: migrate ban_ip/unban_ip to ipset

2026-08-31 00:08:21 +02:00