Wrong ban decision with haproxy bouncer

crowdsec
1

Hello

I’ve a problem with haproxy bouncer that ban IP without any associated decision.

grep " ban " haproxy.log

Nov  8 11:33:53 hap-1 haproxy[1563420]: Active decision ban for <IP1>
Nov  8 11:33:54 hap-1 haproxy[1563420]: Active decision ban for <IP1>
Nov  8 11:33:54 hap-1 haproxy[1563420]: Active decision ban for <IP1>
Nov  8 11:33:56 hap-1 haproxy[1563420]: Active decision ban for <IP2>

then, both on haproxy server and on crowdsec LAPI server I run the following

cscli decisions list --ip <IP1>
No active decisions

cscli decisions list --ip <IP2>
No active decisions

How to clean this?

Thks

2

Hey I replied via discord, currerntly cscli deicisions list --ip only lists local decisions which can be confusing you must run:

cscli decisions list --all | grep <IP>

to see if it came from a blocklist or CAPI we are working on improving this in a future release