Remediations prority should be handle in the bouncer configuration directly about php-cs-bouncer HOT 4 CLOSED

Hello @AlteredCoder,

When i look in https://github.com/crowdsecurity/cs-php-bouncer/blob/main/settings.example.php , I don't see any "flex mode" ? Maybe it is a Wordpress bouncer feature only ?

As mentioned by mobula9, the config is "max_remediation_level" to cap all remediations to a specified level (captcha in our example).

Indeed, this config is not explicitly written in the example, but I guess we could add it :

'max_remediation_level' => 'ban',

You should try with 'max_remediation_level' => 'captcha' and all "ban" remediation will be capped to "captcha".

from php-cs-bouncer.

@AlteredCoder

I don't understand why do you want to change the priorities order, do you have a use case for that?

By example, If you want never ban a user and to ask for a captcha instead, you can use the "flex mode" (the config is "max_remediation_level") to cap all remediations to a specified level (captcha in our example)

from php-cs-bouncer.

Hello,

I don't understand why do you want to change the priorities order, do you have a use case for that?

CrowdSec can trigger multiple scenarios for a same IP. According to your profile configuration, one scenario can lead to a decision with a ban action whereas another decision can lead to a decisions with a captcha action. In this case, i prefer to apply a captcha instead of a ban.

By example, If you want never ban a user and to ask for a captcha instead, you can use the "flex mode" (the config is "max_remediation_level") to cap all remediations to a specified level (captcha in our example)

When i look in https://github.com/crowdsecurity/cs-php-bouncer/blob/main/settings.example.php , I don't see any "flex mode" ? Maybe it is a Wordpress bouncer feature only ?

from php-cs-bouncer.

I closed this ticket as there is already a better way to handle initial need.

from php-cs-bouncer.