Hello, my Linux-configuration: crowdsec & crowdsec-firewall installed localy iptable traefik as docker container The IPs that come through the Crowdsec community aren’t blocked for me. For example, I have one or more IPs listed in crowdsec-blacklists-3 that aren’t DROPED by iptables. I think I h…

I think you need to add Crowdsec docker container in the same network as traefik to block IPs if you already haven’t. Maybe can follow the instructions from this post : Enhance Docker Compose Security with CrowdSec and Traefik How have you been managing your Docker security without anal…

Thanks for your reply. I have Crowdsec installed locally, not via Docker containers. Crowdsec works fine with the containers; IPs are blocked, for example, for hhtp_probing via the local API. The blacklists are synchronized correctly and contain many IPs. My Problem is that IPs on the blacklists …

Did you install crowdsec traefik bouncer? Without that Crowdsec cannot block IPs proxy with traefik.

It depends on your setup, from the iptables dump I can see you haven’t enabled the DOCKER_USER chain which is needed to place the drop rule on docker routing. If you use Cloudflare or another upstream proxy then yes you need to use the traefik plugin / layer 7 remediation on the webserver.

IP in Blocklist not blocked from iptables

crowdsec

Krisskross March 24, 2025, 9:41am 8

Reinstalling the firewall bouncer seems to solve my problem.

Topic		Replies	Views
Same IP keeps getting banned, CTI says it's in community blocklist - firewall rule issue? crowdsec	2	341	November 26, 2024
Beginner issues, not everything getting blocked crowdsec	4	2546	January 14, 2024
Alerts and decicions show, but ip is not blocked	12	736	March 31, 2025
Issues setting up crowdsec on docker with traefik crowdsec	2	1253	August 1, 2025
Crowdsec & UFW modification (Github) & Docker crowdsec	3	3603	December 6, 2022

IP in Blocklist not blocked from iptables

Related topics