Messages

I have the same problem.

Mine logs the same:
level=error msg="Failed to load bucket ls111/opnsense_naxsi_waf_event: invalid bucket from /usr/local/etc/crowdsec/scenarios/scenario.yaml: filter is not allowed for IP scope"
level=fatal msg="crowdsec init: while loading scenarios: scenario loading failed: loading of ls111/opnsense_naxsi_waf_event failed: invalid bucket from /usr/local/etc/crowdsec/scenarios/scenario.yaml: filter is not allowed for IP scope"

It seems this is the old config from ls111 (github) for NAXSI WAF integration.

Same trouble. But more than that - i lost access to web ui and ssh!

Same problem here. And what im found:
1) It is clearly IPS mode when enabled, it drops all outbound traffic on WAN, but inbound traffic is still go;
2) If disable IPS mode - then everything is goes as expected.

So Suricata 6.0.9 IPS mode starts killing whole traffic from inside to outside.