master
Persist status filter preference in DB, add syslog to iptables reload
Stream CIDR data, replace persistent worker with cron + one-shot script
Add data source selector (DB-IP, RIR, ipdeny) and allowed-country ipset whitelist