Catch urllib.error.URLError to handle SSL certificate expiry exceptions

rpthms / nft-geo-filter

Allow/deny traffic in nftables using country specific IP blocks

MIT License

98 stars 24 forks source link

Catch urllib.error.URLError to handle SSL certificate expiry exceptions #20

Closed rpthms closed 3 years ago

rpthms commented 3 years ago

Also, when we're using the allow mode and fail to create new sets for some reason, ensure that the filter-table is dormant, so that we don't block all incoming connections and completely lock ourselves out of the server.

Fixes #19