Skip to content
Snippets Groups Projects
  1. Feb 18, 2024
  2. Feb 17, 2024
  3. Feb 15, 2024
  4. Feb 14, 2024
  5. Feb 07, 2024
  6. Feb 05, 2024
  7. Feb 04, 2024
  8. Jan 30, 2024
  9. Jan 24, 2024
  10. Jan 17, 2024
  11. Jan 15, 2024
  12. Jan 12, 2024
  13. Jan 11, 2024
  14. Jan 07, 2024
  15. Dec 31, 2023
  16. Dec 20, 2023
  17. Dec 16, 2023
  18. Dec 13, 2023
  19. Oct 31, 2023
  20. Oct 30, 2023
  21. Oct 22, 2023
  22. Oct 21, 2023
  23. Oct 13, 2023
  24. Sep 29, 2023
    • Sheogorath's avatar
      removal(crowdsec): Dropping crowdsec · cf0bef90
      Sheogorath authored
      After some testing and fiddling around, I don't think it's worth the
      hassle. Not only was ingress-nginx much less stable since integrating
      the crowdsec bouncer plugin, but also just providing some questionable
      log parsers etc, mainly focusing on bruteforce attacks for passwords,
      which is useless when everything goes to SSO anyway.
      
      Finally there were some other technical faux pas, like hardcoded
      passwords on the integrated dashboard (which is also mostly useless),
      expired GPG keys on the Fedora repository and finally a lack of bouncer
      modules on current Fedora releases, depsite the docs claiming otherwise.
      And given the issues date back to march, it doesn't seem to be a
      something that will be resolved any time soon.
      
      I guess my biggest critique is that the whole "fail2ban of the modern
      area" limits itself to IP addresses only. No additional metadata to
      block or mitigate attacks or identify attackers. Relying on IP addresses
      only in 2023 is not on time. The whole being distributed with the lapi
      server, is nice, but not enough to make this acceptable.
      cf0bef90
  25. Sep 28, 2023
Loading