Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy

    Scheduled Pinned Locked Moved
    General pfSense Questions
    6
    55
    2.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      Just to be clear when this happens it just logs that and continues? It doesn't require manual intervention?

      A 1 Reply Last reply Reply Quote 0
      • A
        a.dresner @stephenw10
        last edited by

        @stephenw10 It's crashed and I had to hire someone to go onsite and manually power cycle it

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          I assume not every time that error is shown though?

          A 1 Reply Last reply Reply Quote 0
          • A
            a.dresner @stephenw10
            last edited by

            @stephenw10 No, just 2x

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Hmm, OK. 2x too many!

              Do you know if it remains responsive at the console when that happens?

              A 1 Reply Last reply Reply Quote 0
              • A
                a.dresner @stephenw10
                last edited by

                @stephenw10 I wish I could say, but its a remote location and has only acted this way when I'm not on site... last time was 24 hours after I left...frustrating

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Are you able to upload a status file to us to review?

                  A 1 Reply Last reply Reply Quote 0
                  • A
                    a.dresner @stephenw10
                    last edited by

                    @stephenw10 of course, pls tell me what to do =)

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Great, you can pull the status_output file from the GUI. See:
                      https://docs.netgate.com/pfsense/en/latest/recipes/diagnostic-data.html#view-and-download-diagnostic-data-in-the-gui

                      Then upload it here:
                      https://nc.netgate.com/nextcloud/s/YfciQktBin7fLEM

                      A 1 Reply Last reply Reply Quote 0
                      • A
                        a.dresner @stephenw10
                        last edited by

                        @stephenw10 All done sir

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Great I see that. Checking....

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Mmm, OK nothing obvious there. I'm going to consult developers on this.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Ok, the likely cause here is a race condition between filter reloads triggered close to simultaneously.

                              That obviously shouldn't happen but you can probably mitigate it by tuning your gateway parameters for the WG_VPN_HQ gateway. Currently that is continually throwing alarms and reloading the filter every time it does. I suspect when you see this error it ends up thowing several alarms and queing up reloads.

                              I would try either setting the monitoring values to far higher numbers, say 50% and 500ms, or disabling monitoring action on the gateway. If that prevents or reduces the errors you're seeing that would prove the theory.

                              Steve

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                a.dresner @stephenw10
                                last edited by

                                @stephenw10 From a troubleshooting standpoint, it makes sense since these overseas vpn can have spotty connection from time to time. I already made those adjustments... waiting to see what happened :D Thanks @stephenw10 much appreciated!

                                1 Reply Last reply Reply Quote 1
                                • W
                                  wblanton
                                  last edited by

                                  I’m also seeing this message pop up a lot recently on one of my 23.09.1 firewalls. I’m counting 8 messages between 4/15 to today (4/28).

                                  It’s always an alert saying:

                                  There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:

                                  Followed by another alert saying:

                                  PF was wedged/busy and has been reset.
                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Same question as the OP here. Anything logged? Any 'exotic' rules? Anything else unusual?

                                    1 Reply Last reply Reply Quote 0
                                    • M
                                      mangelot
                                      last edited by

                                      Same issue here, almost every day (some times twice a day)

                                      06:30:00 PF was wedged/busy and has been reset.
                                      06:30:00 There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:

                                      system general log
                                      Aug 26 06:30:00 php-cgi 51879 rc.filter_configure_sync: New alert found: There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:
                                      Aug 26 06:30:00 php-cgi 51879 rc.filter_configure_sync: New alert found: PF was wedged/busy and has been reset.
                                      Aug 26 06:28:00 sshguard 54936 Now monitoring attacks.
                                      Aug 26 06:28:00 sshguard 55063 Exiting on signal.

                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Is there anything else logged? An alert shown in the system?

                                        Can you replicate it by running Status > Filter Reload?

                                        1 Reply Last reply Reply Quote 0
                                        • M
                                          mangelot
                                          last edited by

                                          Only the warning in GUI and by email (twice a day)

                                          yesterday
                                          16:15:00 PF was wedged/busy and has been reset.
                                          16:15:00 There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:
                                          19:00:00 PF was wedged/busy and has been reset.
                                          19:00:00 There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:

                                          monday:
                                          06:30:00 PF was wedged/busy and has been reset.
                                          06:30:00 There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:
                                          01:30:00 PF was wedged/busy and has been reset.
                                          01:30:00 There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]:

                                          Q: Can you replicate it by running Status > Filter Reload?
                                          A: Cannot replicate the error, no issues when running filter reload, all rules are loaded normally

                                          I can provide the status_output file from the GUI

                                          1 Reply Last reply Reply Quote 0
                                          • A
                                            a.dresner
                                            last edited by

                                            Happened for me again 3x, on a different pfsense box..

                                            pf_busy

                                            PF was wedged/busy and has been reset. @ 2024-08-08 16:20:11
                                            PF was wedged/busy and has been reset. @ 2024-08-13 06:44:50
                                            PF was wedged/busy and has been reset. @ 2024-08-21 14:50:18
                                            Filter Reload

                                            There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]: @ 2024-08-08 16:20:12
                                            There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]: @ 2024-08-13 06:44:51
                                            There were error(s) loading the rules: pfctl: DIOCADDRULENV: Device busy - The line in question reads [0]: @ 2024-08-21 14:50:19

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post