I have been running crowdsec on my OpenWRT firewall for a bit now, I am just curious as to what others think about it?
Thank you @irmadlad the webui you suggested is showing the logs a lot better than my vibe coded HA plug ins (both my ssh honey pot and my plug in showed nothing) looking over the logs shows so much activity that is happening.
When I ran Crowdsec, I thought it was a great piece of software, and a very decent free tier. I didn’t have any real complaints other that there was not a way, at the time that I knew of, to have the UI selfhosted. I think now someone has created a selfhostable user front end to it, but I haven’t dabbled in that.
Here we go: https://corelab.tech/crowdsec-web-ui-setup-guide/
I think this gent posted this a week or so ago.
Wow thanks! Defently gonna check that out!!
I am using HA
Edit: after looking at what you posted I thought I would check it out, and it is a lot better than the HA thing I vibe coded into home assistant.
Ooops! Well at least the link was helpful to ZebraGoose
I did not mean to through shade onto you this webui is a lot better than my ha vibe code.
Nah…you’re good.
This looks great. I’ll definitely try this out.
It’s great! I use it on both my home server and my Hetzner server. It blocks connections based on behaviors defined by scenarios. I configured it to block any connections it decides to block via the firewall.
So far, so good. I don’t even know it’s running. It just does its job of blocking bots.
I had it running in front of my Matrix server. With the default configuration it gave a lot of false positives, leaving friends out of the server. Also, most of my users use VPNs regularly, so geo-blocking was a hassle too. I tuned it a bit, but kept giving me headaches, so I ended up disabling it. I’ll spend more time tuning it someday.
Yeah, I keep getting myself blocked because of something I’m hosting is giving a lot of false positives. I suppose I’ll have to dig into it at some point. For now I just whitelist the IPs I use.
Fine tuning is a great thing to keep in mind, just like a bloated pihole lots of false positives and over looked spots.
