CrowdSec - lightweight and collaborative security engine
Forum Replies Created
-
Forum: Plugins
In reply to: [CrowdSec] Redis user:password issues?Hi @brndnl0,
I’ve just published release 2.6.4 of the plugin, with the Redis DSN fix.
Now, you should be able to use the following DSN settings:-
redis:redis_user:redis_password@?host[redis_host:6379]
or
redis://redis_user:redis_password@redis_host:6379
Please let me know if it works for you.
ThanksForum: Plugins
In reply to: [CrowdSec] Redis user:password issues?Hi @brndnl0,
I was able to reproduce the bug: Redis connection failed with a user/password pair when the user is not the default one.
I discovered that there was an issue about it in the Symfony repo.
This has been fixed and, for some reason, the version included in this plugin doesn’t have the fix.
I’ll see as soon as possible how to fix this in the plugin code as well.
Thanks again for pointing this out.
P.S: It’s not important but I don’t see your last post in this topic. It’s probably a bug in this WordPress forum. Luckily, I received an email with the content of your last post.Forum: Plugins
In reply to: [CrowdSec] Redis user:password issues?Hi @brndnl0 ,
thanks for your message.
I think it should work unless there’s a problem with the Symfony cache component itself.
On reading the documentation, you may have to useredis:user:pass@localhost:6379Can you try with this ?
Can you also try a password without special characters (especially @)?
Just in case, maybe try alsoredis:user:[email protected]:6379
Do you have an error message somewhere ? (maybe inwp-content/uploads/crowdsecif you activate the debug log mode in the advanced settings of the plugin, or in the admin view when you save settings or try the bouncer)
ThanksForum: Plugins
In reply to: [CrowdSec] Verify checksums fails due to added filesHi @rolekwp,
In the 2.6.0 release, we’ve changed the log an cache folder to a
wp-content/uploads/crowdsecfolder.Plugin should pass now the checksum verification.
Thanks again
Forum: Plugins
In reply to: [CrowdSec] Verify checksums fails due to added filesHi @rolekwp,
Thanks for your message.
For the moment, it’s not possible to choose the location of log and cache files.
I’ve just created an issue to improve this.For your information, if you choose Redis or Memcached as cache system, there will be no more cache files in the file system. You can also disable all logs (prod and debug).
Thanks again.
- This reply was modified 2 years, 3 months ago by CrowdSec - lightweight and collaborative security engine.
Forum: Plugins
In reply to: [CrowdSec] Redis password?Hi, I’m closing this issue. Happy to continue the conversation here or elsewhere.
Forum: Plugins
In reply to: [CrowdSec] Crowdsec – WordPress featuresHi, I’m closing this issue. Happy to continue the conversation here or elsewhere.
Forum: Plugins
In reply to: [CrowdSec] Redis password?Hi @tokar86a ,
You should be able to set the Redis DSN with the password.
Something like:redis://user:[email protected]:6379or
redis://[email protected]:6379
We are using the symfony cache component, so here is a documentation for the DSN configuration.
Please let me know it it works for you,Thanks
Forum: Plugins
In reply to: [CrowdSec] Crowdsec – WordPress featuresHi @dimkasta ,
Thanks for your message.
In short: the WordPress plugin is “just” a bouncer (aka remediation component): it doesn’t detect anything, it applies CrowdSec’s decisions.In other words, once you’ve installed the CrowdSec security engine on your server, certain decisions will be retrieved: community blocklist and local decisions, depending on the scenarios you install. The bouncer will “apply” these decisions: block access for “ban” remediation and display a captcha for “captcha” remediation.
For the last up-to-date documentation of the bouncer: https://github.com/crowdsecurity/cs-wordpress-bouncer/blob/main/docs/USER_GUIDE.mdAnd for a more generic CrowdSec ecosystem documentation: https://docs.crowdsec.net/docs/intro
Hope it will help,
ThanksForum: Plugins
In reply to: [CrowdSec] Unable to connect Bouncer on DockerHi, I’m closing this issue. Happy to continue the conversation here or elsewhere.
Forum: Plugins
In reply to: [CrowdSec] Unable to connect Bouncer on DockerIf I understand correctly, crowdsec is installed inside the web container itself. So, it should be accessiible directly.
Can you try the curl test call :curl -H "X-Api-Key:your-bouncer-api-key" http://127.0.0.1:8080/v1/decisions\?ip=192.168.1.254to see if there is an error ?
To see more logs from the WordPress bouncer itself, you can enable the debug mode in the Adavnced settings. When this mode is enabled, adebug.logfile will be written inwp-content/plugins/crowdsec/logsfolder.Thanks
Forum: Plugins
In reply to: [CrowdSec] Unable to connect Bouncer on DockerHi @nobullwebsites ,
Thanks for your message.
If you are working with docker, you probably have some “web” container (with php, nginx or apache) and an another container for crowdsec.
If you have another setup, please give some details about it : where did you install the crowdsec agent for example?
From the “web” container, crowdsec is not accessible with the “localhost” uri.
First step should be to find which url you have to call from the “web” container to access the “crowdsec” container.
Then you could make a simple curl test (from the web container):curl -H "X-Api-Key:your-bouncer-api-key" your-crowdsec-url:8080/v1/decisions\?ip=192.168.1.254
It should look like below:curl -H "X-Api-Key:ab4429********725d43feb2" http://your-crowdsec-url:8080/v1/decisions\?ip=192.168.1.254
thanksForum: Plugins
In reply to: [CrowdSec] Unexpected HTTP call failureHi, I’m closing this issue. Happy to continue the conversation here or elsewhere.
Forum: Plugins
In reply to: [CrowdSec] default crowdsec install sqlite is not using WAL modeHi @eaperezh ,
Thanks for your message.
Your issue seems to be related to the Crowdsec installation and not related to the WordPress plugin.
I suggest you to open an issue on the crowdsec repository : https://github.com/crowdsecurity/crowdsec/issues
ThanksForum: Plugins
In reply to: [CrowdSec] Unexpected HTTP call failureThanks for your message.
It seems that your “api_url” setting is empty as your log shows”api_url”:””Can you set
http://localhost:8080in your Local API URL setting and try again ?
Thanks- This reply was modified 3 years, 1 month ago by CrowdSec - lightweight and collaborative security engine.
-