Skip to content

Conversation

@daikoz
Copy link
Contributor

@daikoz daikoz commented Jan 2, 2026

linux is a core collection: "core linux support : syslog+geoip+ssh". It should not contain crowdsecurity/whitelist-good-actors !!!

Moreover, whitelist-good-actors contain wrong actor which don't respect robots.txt.
And it added recently.

All whitelist should be add manually by server's administrator, not in core collection.

Description

Checklist

  • [ X] I have read the contributing guide
  • [ X] I have tested my changes locally
  • [ X] For new parsers or scenarios, tests have been added
  • [ X] I have run the hub linter and no issues were reported (see contributing guide)
  • [ X] Automated tests are passing
  • [ X] AI was used to generate any/all content of this PR

linux is a core collection: core linux support : syslog+geoip+ssh
It should not contain crowdsecurity/whitelist-good-actors !!!

Moreover, whitelist-good-actors contain wrong actor which don't respect robots.txt.

All whitelist should be add manually by server's administrator, not in core collection.
@LaurenceJJones
Copy link
Member

Hey @daikoz thank you for opening a PR, i'll give some background on why we decided to make it within the standard linux collection.

Before hand we was getting about 100 - 200k signals per day based on these ranges, IPs. Because unfortunately users just install CrowdSec, go out to find other collection to install other than ones they need cause they dont really understand they are banning ranges they can ultimately bring down their sites (cloudflare CDN gets banned, your site is unreachable for users going through cloudflare cdn).

Before we added this change we only had 600 instances that actively installed this VS the 200k instances that are out their.

Moreover, whitelist-good-actors contain wrong actor which don't respect robots.txt.

If you can provide more content on who, what they did then we come be come around, but blanketing saying "administrators should install it" when we have the stats on our end to prove users just dont.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants