# V1.09 & cs-firewall-bouncer issue

**URL:** <https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139>\
**Category:** crowdsec\
**Created:** [March 11, 2021, 12:22am UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139 "2021-03-11T00:22:34Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![gppixelworks](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/gppixelworks/32/38_2.png) [@gppixelworks](https://discourse.crowdsec.net/u/gppixelworks)\
**Post date:** [March 11, 2021, 12:22am UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/1 "2021-03-11T00:22:34Z")

</div>

Just updated to v1.09 from the Debian respository. Firstly, this looked a bit odd:

```
apt search crowdsec
Sorting... Done
Full Text Search... Done
crowdsec/unknown,now **1.0.7** -3 amd64 [installed]
Crowdsec - An open-source, lightweight agent to detect and respond to bad behaviours. It also
automatically benefits from our global community-wide IP reputation database
 
root@gppixelworks:/etc/crowdsec/cs-firewall-bouncer# crowdsec -version
2021/03/11 00:07:41 version: **v1.0.9** -18ff3a3a306d1eca786038fb343250e43784a900

```

The issue I’m experiencing is that cs-firewall-bouncer will not start. Here’s the log when attempting to start the cs-firewall-bouncer service:

```
time="10-03-2021 23:52:34" level=info msg="backend type : iptables"
time="10-03-2021 23:52:34" level=info msg="iptables for ipv4 initiated"
time="10-03-2021 23:52:34" level=info msg="iptables clean-up : /sbin/iptables -D INPUT -m set --match-set crowdsec-blacklists src -j DROP"
time="10-03-2021 23:52:34" level=info msg="ipset clean-up : /sbin/ipset -exist destroy crowdsec-blacklists"
time="10-03-2021 23:52:34" level=info msg="Checking existing set"
time="10-03-2021 23:52:34" level=info msg="ipset set-up : /sbin/ipset -exist create crowdsec-blacklists nethash timeout 300"
time="10-03-2021 23:52:35" level=info msg="Rule doesn't exist (/sbin/iptables -C INPUT -m set --match-set crowdsec-blacklists src -j DROP)"
time="10-03-2021 23:52:35" level=info msg="iptables set-up : /sbin/iptables -I INPUT -m set --match-set crowdsec-blacklists src -j DROP"
time="10-03-2021 23:52:35" level=info msg="iptables for ipv6 initiated"
time="10-03-2021 23:52:35" level=info msg="iptables clean-up : /sbin/ip6tables -D INPUT -m set --match-set crowdsec6-blacklists src -j DROP"
time="10-03-2021 23:52:35" level=info msg="ipset clean-up : /sbin/ipset -exist destroy crowdsec6-blacklists"
time="10-03-2021 23:52:35" level=info msg="Checking existing set"
time="10-03-2021 23:52:35" level=info msg="ipset set-up : /sbin/ipset -exist create crowdsec6-blacklists nethash timeout 300 family inet6"
time="10-03-2021 23:52:36" level=warning msg="iptables check command (/sbin/ip6tables -C INPUT -m set --match-set crowdsec6-blacklists src -j DROP) failed : exit status 1"
time="10-03-2021 23:52:36" level=info msg="iptables set-up : /sbin/ip6tables -I INPUT -m set --match-set crowdsec6-blacklists src -j DROP"
time="10-03-2021 23:52:36" level=info msg="Processing new and deleted decisions . . ."
time="10-03-2021 23:52:36" level=fatal msg="http code 404, invalid body: invalid character '<' looking for beginning of value"

```

Not sure how to proceed and am looking for some suggestions.

---

<div class="post-metadata">

**Author:** ![thibault](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/thibault/32/2_2.png) [@thibault](https://discourse.crowdsec.net/u/thibault)\
**Post date:** [March 11, 2021, 9:03am UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/2 "2021-03-11T09:03:58Z")

</div>

Hello,

Which debian repository are you speaking about ? Ours, or the official debian repository ?

Thanks for the report nonetheless, we’re investigating !

---

<div class="post-metadata">

**Author:** ![gppixelworks](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/gppixelworks/32/38_2.png) [@gppixelworks](https://discourse.crowdsec.net/u/gppixelworks)\
**Post date:** [March 11, 2021, 10:02am UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/3 "2021-03-11T10:02:06Z")

</div>

Ooops … Here I thought I’d remembered to provide all relevant information. 😬

Am using yours:

`s3-eu-west-1.amazonaws.com/crowdsec.debian.pragmatic/stretch stretch main`

I wasn’t aware Crowdsec was in the official Debian repository yet although knew it was in the process of doing so.

FWIW my experience is that Crowdsec is a great package for security. The cooperative aspect is a refreshing change and, I believe, a helpful feture.

---

<div class="post-metadata">

**Author:** ![alteredCoder](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/alteredcoder/32/44_2.png) [@alteredCoder](https://discourse.crowdsec.net/u/alteredCoder)\
**Post date:** [March 11, 2021, 1:55pm UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/4 "2021-03-11T13:55:50Z")

</div>

Hello @gppixelworks,

We didn’t manage to reproduce your bug 😕  
Can you please share the following files with us:

- /var/log/crowdsec.log
- /etc/crowdsec/config.yaml
- /etc/crowdsec/cs-firewall-bouncer/cs-firewall-bouncer.yaml

I’m available in private message or on gitter if you don’t want to share those files publicly

---

<div class="post-metadata">

**Author:** ![gppixelworks](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/gppixelworks/32/38_2.png) [@gppixelworks](https://discourse.crowdsec.net/u/gppixelworks)\
**Post date:** [March 11, 2021, 2:57pm UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/5 "2021-03-11T14:57:01Z")

</div>

Will contact you shortly on gitter (via Matrix) and send you those files.

---

<div class="post-metadata">

**Author:** ![mikensan](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/mikensan/32/177_2.png) [@mikensan](https://discourse.crowdsec.net/u/mikensan)\
**Post date:** [October 15, 2021, 1:44pm UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/6 "2021-10-15T13:44:18Z")

</div>

Because I had a hard time finding a solution - if others come across this same issue I wanted to share what my issue was and what I assume others’ are as well.

I had other services using 8080, so I had to update the port in 3 places:  
/etc/crowdsec/config.yaml  
api \> listen\_uri: 127.0.0.1:8080 (change 8080 to something available)  
/etc/crowdsec/local\_api\_credentials.yaml  
url: [http://127.0.0.1:8080](http://127.0.0.1:8080) (change to whatever you decided on above)  
/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml  
api\_url: [http://localhost:8080/](http://localhost:8080/) (likewise, whatever you picked from config.yaml)

---

<div class="post-metadata">

**Author:** ![klausagnoletti](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/klausagnoletti/32/201_2.png) [@klausagnoletti](https://discourse.crowdsec.net/u/klausagnoletti)\
**Post date:** [October 15, 2021, 6:25pm UTC](https://discourse.crowdsec.net/t/v1-09-cs-firewall-bouncer-issue/139/7 "2021-10-15T18:25:52Z")

</div>

Thanks for remembering to follow up! Highly appreciated!