Messages

Logs on both sides would be interesting

Den LDAP import für user gibt es nicht mehr.

Der Benutzer kann einfach manuell angelegt werden mit dem gleichen Namen wie er im CN steht.

Also e.g., "cn=Testuser" einfach als "Testuser" anlegen und den Haken bei "Scrambled Password" setzen.

Aber es kommt auch bald ein CSV import:

https://github.com/opnsense/core/issues/8340

Von uns gesponsert:)

Autocreate bringt nichts wenn du 100 user migrieren musst und das alles vorbereitet wird von einem admin.

@mimugmail's package repo is not yet ready for 25.1 - that's why you cannot have both at the moment until that is fixed.

It should be now :)

Perfect, thx for testing :)

Pushed a new update, can you try if it works now?

After 24h still compiling packages ...

Observium is superb with OPNsense :)

What about

pkg install azure-agent

The latest package should be already there
https://pkg.opnsense.org/FreeBSD:14:amd64/25.1/MINT/25.1.2/latest/All/

Mit dem letzten Update ist das icu kaputt, ich bau grad die Pakete neu, dauert aber noch bisschen.

If you use unicast carp you shouldnt sync Virtual IPs, only when using Multicast

I pinged franco, lets see :)

Ich bin auch Papa und würde genau deswegen eher in der Arbeit um 16 kurz reinschauen, da am WE die Family Priorität hat ;)

https://github.com/opnsense/core/pull/7361

There is a PR an a branch, I'll try to get it running in Jan next year

Yes, after holiday season :)

Being new to crowdsec, would there be any recommended settings to change outside the box of installing the plugin and "enabling" it or are defaults safe/legit for home user with basic setup? I went to the config site with all the options and being I know nothing of it, I would have 0 idea of what to change or add or modify.

cscli is your friend. You probably want to whitelist all RFC 1918 networks. To do that:

Code Select Expand

cscli parsers install crowdsecurity/whitelists
If you want to not only parse OPNsense pf logs and UI login attempts (if your UI is reachable from WAN at all) but e.g. Caddy access logfiles you can add the matching collection:

Code Select Expand

cscli collections install crowdsecurity/caddy
Then add a file named "/usr/local/etc/crowdsec/acquis.d/caddy.yaml":

Code Select Expand

filenames:
  - /var/log/caddy/access/*.log

force_inotify: true
poll_without_inotify: true

labels:
  type: caddy

You get the idea. There are lots of collections for different scenarios depending on what you use for inbound service - NginX, HAproxy, Caddy, ...

You can find them at https://app.crowdsec.net/hub/collections

In the Crowdsec web console you can subscribe to up to three free blocklists in addition to your own locally generated "decisions" as they call it. I use:

- Firehol cruzit.com list
- Firehol greensnow.co list
- Firehol cybercrime tracker list

HTH,
Patrick

Greensnow is good, cruzit was last updated in 2023 on Firehol. Thx for the cli-fu in crowdsec, wasnt aware of :)