Whitelist broken
Solved
LinuxSome of our machines updated to the latest 1.7.5 version and completely broke postoverflow whitelist functionality, leading to our machines banning themselves.
I think the problem may lie in cmd/crowdsec/output.go, which was modified this release.
I may be wrong, I'm not a seasoned go expert and I'm not familiar with the codebase.
But it seems to me that in the case of an overflow, the overflow object is set to the
https://github.com/crowdsecurity/crowdsec/blob/master/cmd/crowdsec/output.go#L107
time="2026-01-23T06:59:15+01:00" level=info msg="Ban for <IP> whitelisted, reason [Whitelisted country]" id=falling-flower module=parser name=<company>/whitelist_countries stage=s01-whitelist
time="2026-01-23T06:59:15+01:00" level=info msg="Ip <IP> performed 'crowdsecurity/http-crawl-non_statics' (41 events over 400.990707ms) at 2026-01-23 05:59:14.537695975 +0000 UTC"I think the problem may lie in cmd/crowdsec/output.go, which was modified this release.
I may be wrong, I'm not a seasoned go expert and I'm not familiar with the codebase.
But it seems to me that in the case of an overflow, the overflow object is set to the
oveventovhttps://github.com/crowdsecurity/crowdsec/blob/master/cmd/crowdsec/output.go#L107
