all: Bump PORTREVISION after lang/go{119,120} update56b5ec772fPort details
security/crowdsec-firewall-bouncer 0.0.38_2
CrowdSec bouncer written in golang for firewalls
Port info
- Maintainer
- manuel@crowdsec.net
- Packages
- latest: 0.0.38_2
- Upstream
- up to date
- Last update
- to 0.0.38_2 · d81b7ba3c3
- Quarterly
- 2026Q4: 0.0.38_2 · last MFH 60647eff54
- WWW
- https://github.com/crowdsecurity/cs-firewall-bouncer
- Links
- cgit · VuXML
Install
- Package
# pkg install crowdsec-firewall-bouncerinstalls 0.0.38_2 fromlatest; fromquarterly(2026Q4) 0.0.38_2- Port
# cd /usr/ports/security/crowdsec-firewall-bouncer && make install clean- Size
- 4.8 MiB download · 15 MiB installed
- Depends on
- nothing
- License
- MIT
- pkg-message
Shown after installing
crowdsec-firewall-bouncer is installed. Note: If you are using OPNsense or pfSense, ignore the following instructions and use the settings page of the CrowdSec plugin. ----- If you are running crowdsec on this machine, the bouncer will register itself with the Local API when it's started the first time. If the LAPI is on a different machine, you need to manually register the bouncer and fill api_key and api_url in /usr/local/etc/crowdsec/bouncers/crowdsec-firewall-bouncer.yaml before starting the service. This package depends on the Packet Filter service. To make sure it's active: ---------- # service pf enable pf enabled in /etc/rc.conf # service pf start Enabling pf. ---------- Add the following in /etc/pf.conf to create the firewall tables and rules. If the start command complained about missing pf.conf, you'll have to run it again. ---------- table <crowdsec-blacklists> persist table <crowdsec6-blacklists> persist block drop in quick from <crowdsec-blacklists> to any block drop in quick from <crowdsec6-blacklists> to any ---------- If you already have any pass rule, you may want to put the block rules before them. To apply the file: # pfctl -f /etc/pf.conf Then activate the bouncer service and run it: ---------- # service crowdsec_firewall enable crowdsec_firewall enabled in /etc/rc.conf # service crowdsec_firewall start ----------
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.0.38_2 | 0.0.38_1 | – |
| FreeBSD 15 | 0.0.38_2 | 0.0.38_1 | – |
| FreeBSD 14 | 0.0.38_2 | 0.0.38_1 | 0.0.38_2 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.0.38_2 | 0.0.38_1 | – |
| FreeBSD 14 | 0.0.38_2 | 0.0.38_1 | 0.0.38_2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 0.0.38_2.Fixed (0)
No VuXML entries for this package.
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (68)
all: Bump PORTREVISION after GO_DEFAULT update.2297efc51b
all: Bump PORTVERSION after lang/go{118,119} update3b383d833aall: Bump PORTREVISION after lang/go{118,119} updated9ad1002d5all: Bump PORTREVISION after lang/go{118,119} updatebde51869eeall: Bump PORTREVISION after lang/go{118,119} updatef05c98fffbRemove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
all: Bump PORTREVISION after Go update Bump Go ports PORTREVISION after GO_DEFAULT and lang/go118 update.4476f89764
all: Bump PORTREVISION after lang/go{117,118} update153cb65ac8*/*: Bump port revisons after lang/go{117,118} update309cdeccd8*/*: Repair after switching to versioned Go ports
- Add 1.17 to USES=go for ports that still need go117, remove GO_PORT;
- Add missing ${SETENV} ${MAKE_ENV} to repair BINARY_ALIAS;
- Remove explicit dependencies on lang/go.
PR: 264336
Reviewed by: ygy jwb yuri mikael drtr0jan@yandex.ru decke mat
Differential Revision: https://reviews.freebsd.org/D35346b16eb860ccsecurity/crowdsec-firewall-bouncer: Update to 0.0.23.r2 - updated executable to upstream v0.0.23-rc2 - reverted configuration to manual editing of pf.conf (optionally with an anchor) - removed log rotation with newsyslog (implemented natively in the executable) - removed dependency on crowdsec package (can be on an external host)286b854447
security/crowdsec{-firewall-bouncer}: handle pkg upgrade
- avoid flushing the firewall rules upon install by using pf anchors
- restart service after upgrade if it was running before
PR: 261304
MFH: 2022Q1b927d496c1security/crowdsec*: update to their latest releases security/crowdsec: - update to version 1.2.3 security/crowdsec-firewall-bouncer: - update to version 0.0.20 - update pkg-message Add log rotation to both ports, and other small improvements. PR: 26026218a4c3574d
security/crowdsec-firewall-bouncer: update to 0.0.17 Update to 0.0.17 release and pass the maintainership to the submitter. PR: 26026404d93cdfdf
security/crowdsec-firewall-bouncer: update to 0.0.13b1c9888d33
security/crowdsec-firewall-bouncer: new port Crowdsec bouncer written in golang for firewalls. cs-firewall-bouncer will fetch new and old decisions from a CrowdSec API to add them in a blocklist used by supported firewalls. WWW: https://github.com/crowdsecurity/cs-firewall-bouncer9ecdfbcdb5