504 Gateway error after update
-
@stephenw10
OK so I finally got the cable (15ft) with a ferrite core and plugged in and got the serial port to respond.
I tried to restart php and the web configurator but the webgui still is unresponsive afterwards.
Going to try a reboot. -
@stephenw10 ok even after a reroot things are still not working
-
You are seeing that for every page in the gui after the reboot?
Do you see any errors in the boot logs?
Otherwise check the system and nginx logs from the command line for errors:
https://docs.netgate.com/pfsense/en/latest/monitoring/logs/manage.html#viewing-log-contents-21-02-2-5-0-and-laterSteve
-
@stephenw10 when I log in the GUI it's just a white screen and it's permanently pinwheeling
-
You might try accessing a page other than the dashboard dircetly. One of the widgets there may be causing an issue. So, for example: https://192.168.1.1/status_logs.php
Otherwise check the logs.
Steve
-
@stephenw10 oh yeah that does work!
There was several errors about loading a rules list called pfctl_rules -
maybe a few more than several
-
Hmm, OK, that's a lot of errors!
I've not seen exactly that before but similar issues have been the result of an incomplete upgrade.
What is the output at the command line of?:pkg info -x pfsense
Steve
-
@stephenw10
Hi Stephen,
Yeah the update did not go smoothly.
Maybe it's something I have misconfigured or maybe it's a bug.pfSense-22.05
pfSense-Status_Monitoring-1.7.11_4
pfSense-base-22.05
pfSense-default-config-serial-22.05
pfSense-kernel-pfSense-22.05
pfSense-pkg-Avahi-2.2_1
pfSense-pkg-Status_Traffic_Totals-2.3.2_2
pfSense-pkg-acme-0.7.1_1
pfSense-pkg-bandwidthd-0.7.4_5
pfSense-pkg-darkstat-3.1.3_5
pfSense-pkg-iperf-3.0.2_5
pfSense-pkg-nmap-1.4.4_6
pfSense-pkg-pfBlockerNG-devel-3.1.0_4
pfSense-rc-22.05
pfSense-repo-22.05_2
pfSense-u-boot-1100-20220428
pfSense-u-boot-2100-20210930_1
pfSense-u-boot-env-20220429
pfSense-upgrade-1.0_26
php74-pfSense-module-0.81 -
@jvamos
none of these package show updates available
when trying to access https://192.168.1.1/firewall_rules.php there is a 502 bad gateway error. -
Hmm, do you have any 'unusual' rules?
-
@stephenw10
Maybe some poorly configured outdated vlans? -
No it would need to be some combinations of odd settings making it unique. Like maybe a gateway, schedule, IP options and one TCP flag or something equally weird.
Try running at the command line:
pfctl -vvf /tmp/rules.debug
If it's a rules issue directly that will fail but should show what it's choking on.
Steve
-
You should also check the running kernel with
uname -a
in case it's booted the 22.01 kernel somehow. For example:[22.05-RELEASE][admin@2100-2.stevew.lan]/root: uname -a FreeBSD 2100-2.stevew.lan 12.3-STABLE FreeBSD 12.3-STABLE plus-RELENG_22_05-n202700-3ddaea61055 pfSense arm64
Steve
-
Loaded 762 passive OS fingerprints pfctl: pfctl_rules pfctl: DIOCXROLLBACK: Invalid argument
I think you were right. The upgrade only half finished.
uname -a FreeBSD pfsense.johnst 12.3-STABLE FreeBSD 12.3-STABLE plus-RELENG_22_01-n202637-97cc5c23e13 pfSense arm64
-
pfSense-upgrade -d -c >>> Updating repositories metadata... Updating pfSense-core repository catalogue... pfSense-core repository is up to date. Updating pfSense repository catalogue... pfSense repository is up to date. All repositories are up to date. Your system is up to date
-
Another possibility here is that the 22.01 kernel has loaded from another boot device.
Do you have an SSD in that 2100? Is it booting ZFS from the SSD?
-
@stephenw10
No it’s just stock. I think it’s just emmc.
Is there a good way to check?Josh
-
You can run
zpool status
to see what it booted from.You can run
geom disk list
to see the drives in the system. -
zpool status KLD zfs.ko: depends on kernel - not available or version mismatch internlize ZFS library
This is the output of the first command
Geom name: flash/spi0 Providers: 1. Name: flash/spi0 Mediasize: 4194304 (4.0M) Sectorsize: 512 Stripesize: 4096 Stripeoffset: 0 Mode: r0w0e0 descr: w25q32 ident: (null) rotationrate: unknown fwsectors: 0 fwheads: 0 Geom name: mmcsd0 Providers: 1. Name: mmcsd0 Mediasize: 7820083200 (7.3G) Sectorsize: 512 Stripesize: 512 Stripeoffset: 0 Mode: r1w1e3 descr: MMCHC DG4008 0.1 SN A603B710 MFG 12/2019 by 69 0x0000 ident: A603B710 rotationrate: 0 fwsectors: 0 fwheads: 0 Geom name: mmcsd0boot0 Providers: 1. Name: mmcsd0boot0 Mediasize: 4194304 (4.0M) Sectorsize: 512 Stripesize: 512 Stripeoffset: 0 Mode: r0w0e0 descr: MMCHC DG4008 0.1 SN A603B710 MFG 12/2019 by 69 0x0000 ident: A603B710 rotationrate: 0 fwsectors: 0 fwheads: 0 Geom name: mmcsd0boot1 Providers: 1. Name: mmcsd0boot1 Mediasize: 4194304 (4.0M) Sectorsize: 512 Stripesize: 512 Stripeoffset: 0 Mode: r0w0e0 descr: MMCHC DG4008 0.1 SN A603B710 MFG 12/2019 by 69 0x0000 ident: A603B710 rotationrate: 0 fwsectors: 0 fwheads: 0
It's just the stock option.