Messages

Hey Laurence from CrowdSec,

We do miss posts that are not in official forums so dont expect us to always find these posts.

So the scenario as outlined on the hub has the description: https://app.crowdsec.net/hub/author/crowdsecurity/scenarios/suricata-alerts


```
    trigger ban on Major (severity:1) rules
    trigger ban on >2 distinct rules of severity 2
```

So we always trigger an immediate ban on Major rules, but if the information leak is a severity of 2, we only trigger a ban if they have attempted >2 so 3 rules of the same severity

Hey,

Posting on opnsense forums might get missed by us. We have https://discord.gg/crowdsec and https://discourse.crowdsec.net/ that we monitor.

You need to ssh into the machine and check /var/log/crowdsec.log to see what the error is happening.