Files
crowdsec-bitninja-interaction/README.md

41 lines
1.3 KiB
Markdown

This adds all Crowdsec blocked IPs to the local Bitninja blocklist. Requirements, Crowdsec and Bitninja on the same machine
This needs some dependencies, these are mongoDB and dotenv. This can be installed with:
---
MongoDB:
`go get go.mongodb.org/mongo-driver/mongo`
---
Dotenv:
`go get github.com/joho/godotenv`
To get it working, copy example.env to .env and change the values when needed. Otherwise it uses the default.
To run it, you can use `go run main list` to receive all active bans. To build a local executable, you can use
`go build -o bitninja-manager main.go`
to build it as bitninja-manager
The available commands are:
Receive all currently banned IPs (logged):
`go run main.go list`
Get stats:
`go run main.go stats`
Manually cleanup expired bans:
`go run main.go cleanup`
Manually ban/Add a IP:
`go run main.go add 192.168.1.100 24h "Brute force attack" '{"severity":"high","source":"fail2ban"}'`
Perma ban IP:
`go run main.go add 192.168.1.102 permanent "Serious threat" '{"threat_level":"critical"}'`
Manually unban a IP:
`go run main.go del 192.168.1.100`
IP is ofcourse a dummy and go run main.go can be replaced with the binary like: `./bitninja-manager` for the local directory
To use it with crowdsec enter the binary location in the proper location of the custom bouncer