Crowdsec engine and API on windows bouncer on openwrt issues

crowdsec
1

Hello there,

I’ve installed the crowdsec engine on a windows machine and the bouncer on openwrt as stated in the title. It is my first experience with crowdsec.

I can curl the windows machine port 8080 from the router, crowdsec is listening to 8080 and config is valid on the bouncer side but the log shows also that the connection to the api with the key fail i/o timeout.

result from cat /var/log/crowdsec-firewall-bouncer.log

time=“25-12-2023 00:21:04” level=error msg=“auth-api: auth with api key failed return nil response, error: dial tcp 192.168.x.x:8080: i/o timeout”
time=“25-12-2023 00:21:04” level=error msg=“Get "http://192.168.x.x:8080/v1/decisions/stream?startup=true\”: dial tcp 192.168.x.x:8080: i/o timeout"

Any idea what the problem is ?

Thanks by advance for your help.

2

It looks like I am receiving the exact same error from my Crowdsec bouncer installed on OpenWrt 22.03.5 using crowdsec-firewall-bouncer 0.0.28-2. I’m using Crowdsec 1.5.5 installed as a Docker container on an Ubuntu machine on the same network. I can query the same API endpoint using curl and I receive results back. Not sure what else to try here as it seems to be a configuration issue on my OpenWrt instance or an issue with the bouncer. Here is my bouncer’s configuration:

config bouncer
        option enabled '1'
        option ipv4 '1'
        option ipv6 '1'
        option api_url 'http://192.168.1.69:8080'
        option api_key 'XXX'
        option update_frequency '10s'
        option deny_action 'drop'
        option deny_log '0'
        option log_prefix 'crowdsec: '
        option log_level 'info'
        option filter_input '1'
        option filter_forward '1'
        list interface 'eth1'