Crowdsec 3 Free Blocklists Setup

Started by peterwkc, December 19, 2024, 02:51:26 AM

Previous topic - Next topic
December 19, 2024, 02:51:26 AM Last Edit: December 19, 2024, 03:34:53 AM by peterwkc
Dear all users, I had setup the crowdsec plugin from opnsense plugins page. It worked well where i can see some ip was blocked in the firewall log.
AFAIK, Patrick had mentioned 3 free lists if you create an account from https://app.crowdsec.net/security-engines

How do I connect my existing crowdsec to my newly created crowdsec account on webpage?


- Firehol cruzit.com list
- Firehol greensnow.co list
- Firehol cybercrime tracker list

Any help is appreciate. Thanks.

Is it this command ?

sudo cscli console enroll -e context LICENSE_KEYS

As long as you have registered your instance of crowdsec on your OPNSense on the "hub", it is a case of selecting your choice of free blocklists there on the hub. It will show on your instance details like this.
Have you enroled your instance in the hub?

December 20, 2024, 02:45:09 AM #3 Last Edit: December 20, 2024, 02:56:57 AM by peterwkc
Quote from: cookiemonster on December 19, 2024, 11:11:38 AMAs long as you have registered your instance of crowdsec on your OPNSense on the "hub", it is a case of selecting your choice of free blocklists there on the hub. It will show on your instance details like this.
Have you enroled your instance in the hub?


I had enroll using this command then subscribe to the free 3 blocklists -> sudo cscli console enroll -e context LICENSE_KEYS --overwrite

Questions:
Do I need to add the firewall alias for the Free 3 blocklists and the block rule as well in opnsense?

Thanks for reply.

No, once you install Crowdsec it will install and link the Bouncer, look at your Services->Crowdsec->Overview and click on "Bouncers", that is what manages the 'crowdsec' named Alias in your Firewall Aliases.