search

crowdsecurity / hub

Main repository for crowdsec scenarios/parsers
https://hub.crowdsec.net
157 stars 150 forks source link

Hub: `crowdsec/iptables` : Update description and name to cover `nftables` #349

Open jarppiko opened 2 years ago

jarppiko commented 2 years ago

Hub: crowdsec/iptables relies on Linux kernel's messages that are not iptables specific, but the format is the same for iptables and nftables - the syslog lines from nftables are identical to the log lines from iptables. At least the Hub description should indicate compatibility with nftables and maybe even the scenario name.

jarppiko commented 2 years ago

For further development, you could consider using correct naming in scenario code: iptables ==> netfilter. The logging is done via libnetfilter_log user space lib and nfnetlink_log kernel module which are netfilter, not iptables specific. The next Ubuntu LTS 22.04 should be using nftables by default. It is usually helps to stop building on legacy early before the dependencies grow too great. :-)

buixor commented 2 years ago

Hello,

Currently there is no easy way to rename existing scenarios, but we keep this one in mind (and sorry for the huge delay!)