gateway: support list of WAN interfaces via i_interfaces config option

common/etc/eterban/settings.ini

@@ -11,6 +11,10 @@
 # Second input interface
 #i_interface2 = brlocal2
 
+# List of WAN interfaces (preferred over i_interface/i_interface2)
+# Comma and/or space separated, e.g.: ether1, ether3, enp8s0f0
+#i_interfaces = ether1, ether3
+
 # Internal interface (for blocking outgoing connections to banned IPs)
 # When internal users access banned IPs on ports 80/443,
 # traffic is redirected to ban_server (DNAT by destination, not source)
@@ -21,6 +25,12 @@
 # Maximum number of entries in ipset (default: 2000000)
 #maxelem = 2000000
 
+# Whitelist file: one IPv4/IPv6 address or CIDR network per line, '#' for comments.
+# Loaded into ipset eterban_white (and eterban_white_ipv6) on service start.
+# Whitelisted IPs are never added to the ban ipset and bypass DNAT to ban_server.
+# Default: /etc/eterban/whitelist.txt
+#whitelist_file = /etc/eterban/whitelist.txt
+
 [API]
 # API server for checking if IP is banned
 #listen_host = 127.0.0.1