Install with a top-level collection
6 collections include itsudo cscli collections install crowdsecurity/openbsdInstalls 6 parsers and 6 scenarios, via Web Crawlers - Whitelist.
View OpenBSD →Installation
sudo cscli postoverflows install crowdsecurity/cdn-whitelistThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: crowdsecurity/cdn-whitelistdescription: "Whitelist CDN providers"whitelist:reason: "CDN provider"expression:- "any(File('cloudflare_ips.txt'), { IpInRange(evt.Overflow.Alert.Source.IP ,#)})"- "any(File('cloudflare_ip6s.txt'), { IpInRange(evt.Overflow.Alert.Source.IP ,#)})"data:- source_url: https://hub-data.crowdsec.net/whitelists/cdn_providers/cloudflare_ips.txtdest_file: cloudflare_ips.txttype: string- source_url: https://hub-data.crowdsec.net/whitelists/cdn_providers/cloudflare_ip6s.txtdest_file: cloudflare_ip6s.txttype: string
Installed on
Know where it runs
Sign in to see the Security Engines that run this postoverflow, the version they run and whether it was modified locally.
Documentation
CDNs whitelist
CDNs whitelist based on following lists:
It will whitelist overflows triggered on an IP in those lists