Skip to main content

pfSense

The CrowdSec pfSense integration connects CrowdSec's hosted blocklist endpoint to your pfSense firewall. In pfSense, you'll use URL Table (IPs) aliases to create aliases that periodically download and update IP lists from external URLs.

Ensure your pfSense version supports URL Table (IPs) aliases. If unsure, refer to the pfSense documentation or contact pfSense support.

Step 1 — Create the integration in the CrowdSec Console​

In the Integrations page, click Connect under the pfSense card.

pfSense Integration CardpfSense Integration Card

Name the integration (must be unique to your account), then click Create.

pfSense Integration Creation ScreenpfSense Integration Creation Screen

The credentials shown next are displayed only once. Copy them before closing this screen.

pfSense Integration Credentials ScreenpfSense Integration Credentials Screen

You now have an HTTPS endpoint and Basic Auth credentials to configure on your pfSense device.

Step 2 — Configure pfSense​

  1. Create a URL Table (IPs) alias with a 1-day update frequency. Embed the credentials in the URL using Basic Auth:
https://<username>:<password>@admin.api.crowdsec.net/v1/integrations/<integration_id>/content
  1. Verify the URL alias is resolving correctly.
  2. Create a firewall rule to block IPs matching the alias.

Here is a walkthrough of the full pfSense configuration:

Manage integration size limits with pagination​

If you want to learn how to manage integration size limits with pagination, please refer to the Managing integrations size limits with pagination section.

Next Steps​

Subscribe to blocklists in the Blocklist Catalog to populate your integration.