I’ve installed crowdsec and netfilter-blocker. The server is a postfix server, also running IMAP. The install did not detect postfix (!) so I did this in acquis.yaml, is this correct? #Generated acquisition file - wizard.sh (service: sshd) / files : /var/log/secure filenames: - /var/log/secure l…

Oh, and a way to disable ipv6 configuration to prevent unnecessary fatal errors in the log would be good.

Hello @Swallowtail , [image] Swallowtail: Oh, and a way to disable ipv6 configuration to prevent unnecessary fatal errors in the log would be good. What do you mean about fatal errors and ipv6 ? Normally crowdsec (and the bouncers) should handle this pretty well ! ps: we’re going to provide…

Ok, to securely send us logs, you can use gpg encrypted mail or text via support@crowdsec.net with the gpg public fingerprint 0x8c332d31 (the key is stored on http://keys.gnupg.net/ ) Or either use the the following public armored output: -----BEGIN PGP PUBLIC KEY BLOCK----- mQGNBF+VOSUBDADP6bxKD…

Re the errors it’s not a huge issue, but the netfilter blocker tries to run ipv6 rules, even though my machine does not have the protocol active: time="24-10-2020 14:17:56" level=fatal msg="iptables init failed: Error while insert set in iptables (/usr/sbin/ip6tables -I INPUT -m set --match-set cro…

Hey @Swallowtail [image] Swallowtail: Ideally there should be a config to disable the attempt, or detection if IPv6 is active before attempting to insert the rules. Nice spot indeed, I opened an issue here : Add the possibility of disabling ipv6 ban by configurations · Issue #12 · crowdsecur…

Great. Logs are emailed with pgp.

Hello @Swallowtail Thanks for the logs, we have created the missing scenarios and we should come back to you tomorrow so you/we can test it!

Hello there, I just finished this postfix/postscreen scenarios. You can test this scenario. For now, we are only testing it, so it’s kind of hidden in the hub. You can install it using cscli: cscli update --branch postfix cscli install collection crowdsecurity/postfix --branch postfix --force

[image] kaa: cscli install colection crowdsecurity/postfix --branch postfix --force collection with 2 L :slight_smile: I will check that :wink:

Did you by any chance get some time to check on this ? We would be very thrilled to have some feedback :slight_smile:

New install, postfix / IMAP

thibault March 4, 2021, 12:31pm 23

Hello, related to this topic (customization of jails), your comments are welcome here : Request for comments : parsers & scenarios customization in the CrowdSec agent

Topic		Replies	Views
New to crowdSec, some questions crowdsec	11	3547	March 18, 2021
CrownSec Just not log my failed attemps	7	2058	December 13, 2022
NFTables, Mails crowdsec	9	1254	November 2, 2020
Ipset, performance, whitelist, api, dashboard, postfix logs crowdsec	4	1293	October 16, 2020
Checking bans really work and how to extend bans? crowdsec	8	5068	December 14, 2021

New install, postfix / IMAP

Related topics