Comment on OpnSense + Crowdsec = comfort
LeTak@feddit.org 6 days agoIt is pretty good I use it on many machines. You install it on your machine with a reverse proxy, it then analyses the traffic logs for malicious activity or for known bad IPs and then creates iptable block rules. The web interface is the cloud interface that it connects to, because as the name implies, it works by using log data from all members to block bad actors efficiently
Why with a reverse proxy? I don’t see this mentioned as the default installation method. https://doc.crowdsec.net/u/user_guides/building/
AzuraTheSpellkissed@lemmy.blahaj.zone 6 days ago
You can use crowdsec without a reverse proxy and just block offending IPs using a firewall. However, you can optionally configure a reverse proxy to enforce decisions made by crowdsec, e.g. by serving error pages or by serving captchas. See Remediation Components (formally “Bouncers”)
LeTak@feddit.org 6 days ago
Yes. I check the logs from my web pages with it.
Oh yeah I remember that! neveer felt the need for it.