https://github.com/crowdsecurity/pfSense-pkg-crowdsec

https://github.com/crowdsecurity/pfSense-pkg-crowdsec

Last synced: 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/crowdsecurity/pfSense-pkg-crowdsec
• Owner: crowdsecurity
• Created: 2023-08-01T14:58:00.000Z (almost 3 years ago)
• Default Branch: main
• Last Pushed: 2025-12-05T22:35:50.000Z (6 months ago)
• Last Synced: 2025-12-09T12:32:58.567Z (6 months ago)
• Language: PHP
• Size: 231 KB
• Stars: 68
• Watchers: 15
• Forks: 4
• Open Issues: 27
• Metadata Files:
  • Readme: README.md
  • Security: security/pfSense-pkg-crowdsec/Makefile

Awesome Lists containing this project

• awesome-crowdsec - pfSense-pkg-crowdsec - Native pfSense package with dashboard widget and firewall integration. (Firewall Integrations / Other Bouncers)

README

          
# pfSense-pkg-crowdsec

This package integrates CrowdSec in pfSense.

It is not installed from the official repositories, at least not yet, but you are free to test from the Releases page.

Please refer to the [detailed documentation](https://docs.crowdsec.net/docs/getting_started/install_crowdsec_pfsense/) to install or update it from a release archive.

It provides a basic UI with settings to configure the Security Engine and the Firewall Remediation Component (bouncer).

Three types of configuration are supported:

- Small: remediation only. Use this to protect a set of existing servers already running CrowdSec. The remediation component

  feeds the Packet Filter with the blocklists received by the main CrowdSec instance (*).

- Medium: like Small but can also detect attacks by parsing logs in the pfSense machine. Attack data is sent to the CrowdSec

  instance for analysis and possibly sharing.

- Large: deploy a fully autonomous CrowdSec Security Engine on the pfSense machine and allow other servers to connect to it.

  Requires a persistent /var directory (no RAM disk) and a slightly larger pfSense machine, depending on the amount of data

  to be processed.

(*) If you are already using a Blocklist Mirror, this replaces it while being faster and not requiring pfBlockerNG.