Package request: crowdsec-firewall-bouncer-iptables

[wrhight]

Project description

crowdsec-firewall-bouncer-iptables fetches decisions using the CrowdSec API and adds them to a blocklist used by IPTables.

Metadata

• homepage URL: https://docs.crowdsec.net/u/bouncers/firewall/
• source URL:https://github.com/crowdsecurity/cs-firewall-bouncer
• license: MIT
• platforms: Linux

---

Add a :+1: reaction to issues you find important.

crowdsec was added as part of https://github.com/NixOS/nixpkgs/issues/155822 but the bouncers are missing. Bouncers actually apply decisions made by the security engine, so without this package, it's not that useful.

[ppom0]

[Related self-promotion here] I made a fail2ban rewrite that aims at being much saner to configure and faster. See nixpkgs PR / blog article / repo [/end]

[kampka]

In case you are interested, I'm maintaining a flake that ships the firewall bouncer at:

https://github.com/kampka/nix-flake-crowdsec

[griffi-gh]

I think it would make more sense as a single package (e.g. crowdsec-firewall-bouncer)

[06kellyjac]

I'm inclined to agree on the naming as they share a repo but I might split the outputs for users whom only use iptables or nftables. I've not touched crowdsec much for a while.

I might tackle this over christmas, especially since @kampka's flake is a very helpful point of reference :slightly_smiling_face: