Dear all users, I had setup the crowdsec plugin from opnsense plugins page. It worked well where i can see some ip was blocked in the firewall log.
AFAIK, Patrick had mentioned 3 free lists if you create an account from https://app.crowdsec.net/security-engines
How do I connect my existing crowdsec to my newly created crowdsec account on webpage?
- Firehol cruzit.com list
- Firehol greensnow.co list
- Firehol cybercrime tracker list
Any help is appreciate. Thanks.
Is it this command ?
sudo cscli console enroll -e context LICENSE_KEYS
As long as you have registered your instance of crowdsec on your OPNSense on the "hub", it is a case of selecting your choice of free blocklists there on the hub. It will show on your instance details like this.
Have you enroled your instance in the hub?
Quote from: cookiemonster on December 19, 2024, 11:11:38 AMAs long as you have registered your instance of crowdsec on your OPNSense on the "hub", it is a case of selecting your choice of free blocklists there on the hub. It will show on your instance details like this.
Have you enroled your instance in the hub?
I had enroll using this command then subscribe to the free 3 blocklists -> sudo cscli console enroll -e context LICENSE_KEYS --overwrite
Questions:
Do I need to add the firewall alias for the Free 3 blocklists and the block rule as well in opnsense?
Thanks for reply.
No, once you install Crowdsec it will install and link the Bouncer, look at your Services->Crowdsec->Overview and click on "Bouncers", that is what manages the 'crowdsec' named Alias in your Firewall Aliases.
Here is my collections: