Use a class variable where appropriate instead of overriding it in each
object.

So we generate logout before the new login.

Recover from broken DB connection even if it happens in the
__connection.cursor()

Newer uci mandates flags are before commands. Older one doesn't mind
either way.

In case ipset terminates with error, wait with closing the output until
EOF comes. Closing it right away may cause losing error messages.

When the set size needs to be updated, warn about it, as the firewall
definitions need to be updated.

The firewall rules use names ending with _X, the plain ones are the
temporary sets.

These are filled with bare IP addresses for now. We need them for the
same purpose we had net:ip ones, but there needs to be interoperability
with firewall scripts and these use hash:net.

And try to make the chance of reaching the ipset max name length limit
(31 chars) smaller. We actually hit the limit in practice.

Make the timeout for reload of the sets longer. In case there's some
serious problem (like kmod-ipset not loaded), it wouldn't clutter logs
this way, but if it is recoverable, it'd recover after relatively short
time anyway.

Don't set rights on the router_loggedpacket.archived, since the column
is no longer there.

They are related, so put them together. Its just nicer this way, no real
change.

Don't mention the client ID before the ID is known. No functional
change, just logging cleanup.

Update the state field of sets when updates come. While not updating it
was mostly harmless, this optimises out some downloading of data and
some passing of data to kernel. And it was the original intention.

When the set size is being changed, it is not needed to remove the set
from kernel and create it again. And it wouldn't even work in case the
ipset is already linked into the firewall.

Simply reloading the content by swapping with a newly created set is OK.

Grant the script permissions to update the sets' data in database.

Generate the firewall sets' content. Handle growing of sizes.

Keeping of still active but blocked IPs is still planned.

Take some functionality that'll be reused in other scripts and put it to
separate library. The purpose is more code sharing than some
general-purpose library.

Interminnent merge, to bring an improvement of the fwup plugin master
for easy deploy (as this plugin is not out in the wild yet, there's
nothing that would break by this merge).

Configure the hash sizes of the sets in addition to maximum number of
elements. Added to the DB, the master, docs and the plugin.

Also, fixed a copy-pasted log message on the way.

Insert the right name into the known_plugins table when debug mode is
requested.

Check against duplicate addresses (added twice in a row or removed twice
in a row).

Fix after 60bef82d.

The count of activities per day may overflow the smallint because of
still deployed bug in fake log submission buffering. Increase the data
type size accordingly.

Don't let the client wait too long when it reconnects because of a
broken connection.

Don't allocate additional memory in the trie if we are over the limit.