luci-app-crowdsec-firewall-bouncer: new app

[ne20002]

Signed-off-by: S. Brusch ne20002@gmx.ch

Maintainer: S. Brusch ne20002@gmx.ch
Compile tested: no compile, script
Run tested: ipq40xx/generic, Fritzbox 4040, Openwrt 22.03.3

Description: this is the luci app for crowdsec-firewall-bouncer package

[ne20002]

This is the luci app for the new version of the crowdsec-firewall-bouncer (see this pull request).

[ne20002]

Hi @jow-
I wonder if you can help with this PR. This is a new package with a LuCI app for the crowdsec-firewall-bouncer package. I don't know or found info on how to get a new package reviewed and merged. Is there any special user / group / email I need to contact?

[trippleflux]

@ne20002

I think you need to add

# call BuildPackage - OpenWrt buildroot signature

At the end of Makefile , without it my OpenWrt build environment didn't picked up your package.

[ne20002]

I think you need to add

Added. How about now?

[trippleflux]

Picked it up by OpenWrt, thanks.

[stangri]

JavaScript is required for new apps.

[ne20002]

JavaScript is required for new apps.

@stangri
PR is now updated (with JavaScript).

[ne20002]

Picked it up by OpenWrt, thanks.
Hi @trippleflux
Updated package with JavaScript

[ne20002]

Hi @feckert
May it be possible to get this reviewed as well? I followed coding on the findings of luci-app-bcp38. Thank you very much.

[trippleflux]

Picked it up by OpenWrt, thanks.
Hi @trippleflux
Updated package with JavaScript

Just got the chance to updating my OpenWrt build, haven't tested your package, will try today hopefully.

[trippleflux]

@ne20002

Where is the app located in luci?, I could not found it anywhere. Under "Services" nothing about crowdsec-firewall-bouncer.

[ne20002]

@ne20002

Where is the app located in luci?, I could not found it anywhere. Under "Services" nothing about crowdsec-firewall-bouncer.

It's similar to bcp38 so it's in Network/Firewall.

[trippleflux]

@ne20002
I am sorry that I cannot getting crowdsec to work so cannot verified or testing the functionalities, but quick UI test seems working.

[ne20002]

I am sorry that I cannot getting crowdsec to work so cannot verified or testing the functionalities, but quick UI test seems working.

Actually, to get CrowdSec to work you need a local API instance, an CrowdSec account, at least an agent and a bouncer. The crowdsec-firewall-bouncer covers only a bouncer running on the OpenWrt router and this package is just a UI for the most common configuration settings for the crowdsec-firewall-bouncer.
Most OpenWrt devices do not have enough resources to host a CrowdSec local API but the bouncer only (which is just a filter for malicious ips collected by either local agents (on backend systems) or retrieved via CrowdSec central API from community blacklists).

[trippleflux]

@ne20002
Thank you for the explanation, yes I am on x86_64 router with quite beefy specs, was spent couple hours trying to get it work but no result for me, and I don't want to polluted your PR with crowdsec howtos. But judging from your OpenWrt posts, I am sure you have thinking it through well enough.

[ne20002]

@trippleflux

But judging from your OpenWrt posts, I am sure you have thinking it through well enough.

It's working quite well. ;)

When I get my PR merged (and hopefully both packages also merged into 22.03) I will see if I can update the Wiki as well. It is a bit outdated as it does not reflect the uci configuration of the new crowdsec-firewall-bouncer package and also that it is now based on nftables only.

[Hukuma1]

Can't wait to try to run CS on (hopefully) 22.03. Thank you for these PRs!

I also run AdGuard Home on OpenWrt. Will CS work alongside it just fine or will some adjustments need to be made?

[ne20002]

Can't wait to try to run CS on (hopefully) 22.03. Thank you for these PRs!

We have a forum discussion for details and shouldn't bloat this PR comments with this kind of stuff.
I don't see why those two shouldn't work alongside without problems.

[ne20002]

Hi @stangri
May I ask how I can speed up merging my PR? We have a few users waiting for the package. Also, how is porting to 22.03 branch handled? Is there anything I can do?

[ne20002]

Hi @trippleflux
This PR is still open/pending. As the crowdsec-firewall-bouncer has been merged (to master and 23.03) this luci app would be appreciated by (at least) a few users.
Did I miss somethig doing?

[trippleflux]

@ne20002
I am not an OpenWrt developer/member, I still haven't test the functionalities wise, but I am trusting your judgement and qualities of work as you are already 'beta-test' it with others OpenWrt forums member. Only my personal judgement, I hope also this will gets merged soon.

[ne20002]

Hi @stangri
My PR is stale. What can I do about it? Is anything missing?

[hnyman]

@systemcrash
Please fix the garbage (missing "\n") causing weblate problem spam...

Parsing failed
[Hosted Weblate](https://hosted.weblate.org/) / [OpenWrt](https://hosted.weblate.org/projects/openwrt/) / [LuCI/applications/crowdsec-firewall-bouncer](https://hosted.weblate.org/projects/openwrt/luciapplicationscrowdsec-firewall-bouncer/) / [English](https://hosted.weblate.org/projects/openwrt/luciapplicationscrowdsec-firewall-bouncer/en/)
Error message

unknown encoding: UTF-8""Co

Failing file

applications/luci-app-crowdsec-firewall-bouncer/po/en/crowdsec-firewall-bouncer.po

[systemcrash]

Thanks. Got it.