Firewall bouncer with postfix not working

Wycofane · January 31, 2024, 6:44pm

Hello guys/girls,

I am hosting a private Mailserver (Mailcow Dockerize) and I installed the postfix collection (parser, scenario etc). It is working and detecting it (does decisions), but then some time afterwards the same IP address gets detected again.

How is that possible, shouldn’t the bouncer block these?

Greetings
Wycofane

iiAmLoz · February 1, 2024, 8:13am

Most likely you havent enabled the DOCKER-USER chain within the firewall bouncer configuration. Because docker uses NAT to mangle the packet you must enable the above chain in configuration as it doesnt use the INPUT chain.

github.com

crowdsecurity/cs-firewall-bouncer/blob/e5b565f5db0973dbcb33ec1ed5744d884761a0dc/config/crowdsec-firewall-bouncer.yaml#L26-L29


      
          iptables_chains:
            - INPUT
          #  - FORWARD
          #  - DOCKER-USER

Wycofane · February 1, 2024, 7:41pm

I think that’s it. I changed the value and now I have to wait an observer. Thank you

Topic		Replies	Views
Bouncers for FTP crowdsec	2	611	October 18, 2022
Beginner Question crowdsec	3	676	December 23, 2021
Bouncer not showing up crowdsec	1	79	April 2, 2024
Unable to get local issuer certificate crowdsec	4	373	March 4, 2024
Haproxy bouncert fresh install, a few questions	6	55	April 9, 2024

Firewall bouncer with postfix not working

Related Topics