Ah got it, is the banip dependency on logread (via logd) which is also inside syslog-ng. We had this situation before, manual fix was removing banip before upgrade and installing it without logd dependency.
@dibdot didn’t you remove the logd dependency on turris, or am I remembering it wrongly? we have now banip - 0.9.0-1 as we have nft