crowdsecurity / cs-nginx-bouncer

CrowdSec bouncer for Nginx
MIT License
48 stars 8 forks source link

can't return 403 #40

Closed andyoulovexy closed 1 year ago

andyoulovexy commented 1 year ago

1、cscli decision add -i my accessip 2、when curl -I mysite ip,just pending,nothing retrun image

LaurenceJJones commented 1 year ago

Are you running any other bouncers than nginx? as that is failing to connect so most likely firewall is dropping connection

andyoulovexy commented 1 year ago

Are you running any other bouncers than nginx? as that is failing to connect so most likely firewall is dropping connection

nginx not work,swtich to openresty still not work

andyoulovexy commented 1 year ago

Are you running any other bouncers than nginx? as that is failing to connect so most likely firewall is dropping connection

nginx not work,swtich to openresty still not work

image

LaurenceJJones commented 1 year ago

Ahhh yes that's your issue you have firewall bouncers so any bans will be dropped, before they can get to nginx or open resty

You either need to create a custom ban type for http based scenarios or insert custom iptables/nftables rules to bypass ours for port 80,443

But in short the firewall is blocking the connection entirely

andyoulovexy commented 1 year ago

Ahhh yes that's your issue you have firewall bouncers so any bans will be dropped, before they can get to nginx or open resty

You either need to create a custom ban type for http based scenarios or insert custom iptables/nftables rules to bypass ours for port 80,443

But in short the firewall is blocking the connection entirely

Got it,i will try,thanks

andyoulovexy commented 1 year ago

now it's work,thanks.