On pfsense 2.8.1 with crowdsec 1.7.4 and bouncer 0.0.33 when "/etc/rc.filter_configure_sync" is executed the ip tables crowdsec_blacklists are flushed.
This is issue because in case of any schedule of firewall rule this cron job is added by pfsense itself then:
0,15,30,45 * * * * root /etc/rc.filter_configure_sync
which leads to flushing regularly.
How to test? Just run "/etc/rc.filter_configure_sync" - get deleted IPs.
On pfsense 2.8.1 with crowdsec 1.7.4 and bouncer 0.0.33 when "/etc/rc.filter_configure_sync" is executed the ip tables crowdsec_blacklists are flushed.
This is issue because in case of any schedule of firewall rule this cron job is added by pfsense itself then:
0,15,30,45 * * * * root /etc/rc.filter_configure_sync
which leads to flushing regularly.
How to test? Just run "/etc/rc.filter_configure_sync" - get deleted IPs.