/ 
Net-Firewall-BlockerHelper-0.2.0

Changes for version 0.2.0 - 2026-08-08

  • Add the openwrt backend, driving OpenWrt fw4 via UCI, either locally or on a remote router over ubus JSON-RPC. Supports CIDR bans.
  • Add commit, for backends holding state back from persistent storage. openwrt is currently the only one that implements it.
  • Add Net::Firewall::BlockerHelper::Util, a mixin of shared internal helpers inherited by the frontend and all backends. _valid_cidr, _uri_escape, _json, and _kill_commands now live there instead of being duplicated in each.
  • JSON backends now use JSON instead of JSON::PP, picking up JSON::XS when it is installed. Added as a runtime recommends.
  • Fix re_init erroring with notInited after a teardown or stop. Both clear the inited flag while keeping the ban list, and the frontend has no init of its own, so there was no way to bring the setup back. re_init no longer requires the backend to be inited.
  • ipfw: delete the rule before destroying the table in both init's cleanup and teardown. ipfw will not destroy a table a rule still references, so the old order left the table behind and the next create failed with "File exists", making re_init fail every other run.
  • ipfw: teardown now attempts both of its commands before raising, so an already removed rule no longer stops the table being destroyed.
  • Document every internal method to the same standard as the public API: purpose, arguments, return format, and examples.

Documentation

README.md

Modules

Net::Firewall::BlockerHelper
Helps with managing firewalls for banning IPs.
Net::Firewall::BlockerHelper::Util
Shared internal helpers mixed into the frontend and backends.
Net::Firewall::BlockerHelper::backends::abuseipdb
Report banned IPs to AbuseIPDB.
Net::Firewall::BlockerHelper::backends::akamai
Akamai Network Lists backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::aws_wafv2
AWS WAFv2 IP set backend via the aws CLI.
Net::Firewall::BlockerHelper::backends::azure
Azure NSG backend via the az CLI.
Net::Firewall::BlockerHelper::backends::bgp_rtbh
BGP Remote Triggered Black Hole backend (via ExaBGP, GoBGP, or FRR).
Net::Firewall::BlockerHelper::backends::checkpoint
Check Point Management (web_api) backend.
Net::Firewall::BlockerHelper::backends::cisco_fmc
Cisco Firepower Management Center backend via the REST API.
Net::Firewall::BlockerHelper::backends::cloud_armor
Google Cloud Armor backend via the gcloud CLI.
Net::Firewall::BlockerHelper::backends::cloudflare
Cloudflare IP access rules backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::dns_rpz
DNS RPZ blocklist backend via nsupdate.
Net::Firewall::BlockerHelper::backends::dummy
Example dummy backend for testing purposes.
Net::Firewall::BlockerHelper::backends::f5_bigip
F5 BIG-IP backend using the iControl REST API.
Net::Firewall::BlockerHelper::backends::fastly
Fastly Edge ACL backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::file_reload
Render banned IPs to a file and run a reload hook.
Net::Firewall::BlockerHelper::backends::firewalld
firewalld backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::fortigate
Fortinet FortiGate backend via the REST API.
Net::Firewall::BlockerHelper::backends::hosts_deny
TCP wrappers hosts.deny backend.
Net::Firewall::BlockerHelper::backends::ipfw
IPFW backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::iptables
iptables/ip6tables backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::juniper_srx
Juniper SRX backend via the Junos REST API.
Net::Firewall::BlockerHelper::backends::linux_ip_route
Blackhole route backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::netscaler
Citrix NetScaler/ADC backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::nftables
nftables backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::npf
NetBSD npf backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::nsupdate
Dynamic DNS blocklist backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::openwrt
OpenWrt fw4 backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::opnsense
OPNsense firewall alias backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::panos
Palo Alto Networks PAN-OS backend via the User-ID XML API.
Net::Firewall::BlockerHelper::backends::pf
pf backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::pfsense
pfSense firewall alias backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::routeros
MikroTik RouterOS backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::routeros_api
MikroTik RouterOS backend using the REST API.
Net::Firewall::BlockerHelper::backends::shell
A shell backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::shorewall
Shorewall backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::ufw
ufw backend for Net::Firewall::BlockerHelper.
Net::Firewall::BlockerHelper::backends::vyos
VyOS backend using the HTTP API.
Net::Firewall::BlockerHelper::backends::xdp
XDP/eBPF backend for Net::Firewall::BlockerHelper.

Other files