cs-firewall-bouncer
cs-firewall-bouncer copied to clipboard
Crowdsec bouncer written in golang for firewalls
Hello, I have a configuration that only sets the decisions in element lists using more customized rules for processing. when I enable the prometheus collector on the bouncer I get...
Hi, I'm using crowdsec-firewall-bouncer-nftables. I get errors in the log like: ``` time="25-11-2023 22:16:19" level=info msg="backend type : nftables" time="25-11-2023 22:16:19" level=fatal msg="conn.Receive: netlink receive: operation not supported" ``` What...
Hello, My understanding is that cs-firewall-bouncer polls the local api for changes every 10s by default. This basically mean that the worth response time to an attack is 10s which...
Just adding an issue here as I had it multiple times: The way we collect metrics on nftables is resource heavy and I had multiple complaints from users that if...
"Don't generate Rules" -- this would allow to add a selfdefined rule to the interface of your liking, usually WAN only. At the moment, we get a floating rule for...
When installing the package, we should pull the LAPI URL from `/etc/crowdsec/local_api_credentials.yaml`, and add it to the configuration. If the file is not present (or invalid), we should fallback to...
after users asking question on gitter, we should make the docker usage of the firewall bouncer more obvious
In #111 a new configuration structure was introduced to supprt custom table/chain names, however I think this has some deficiencies, though these probably stem somewhat from the initial design. I...
I run an instance of [Uptime-Kuma](https://github.com/louislam/uptime-kuma) and added the IP of the Container to my crowdsec banlist. Like this I can check the functionality of the firewall bouncer with hitting...