Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DIOCADDRULENV Error

    Scheduled Pinned Locked Moved General pfSense Questions
    27 Posts 3 Posters 1.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hypnosis4u2nv @stephenw10
      last edited by hypnosis4u2nv

      @stephenw10 Actually, Enable automatic outbound NAT for Reflection is ticked but the NAT Reflection mode for port forwards is disabled.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Hmm well that would only do anything if you have NAT reflection enabled on any individual port forwards?

        If not then you may as well disable that setting.

        That bug should be fixed however so it could be something completely different just triggering the same error.

        Try running Status > Filter Reload and see where it fails.

        1 Reply Last reply Reply Quote 0
        • H
          hypnosis4u2nv @stephenw10
          last edited by

          @stephenw10 No.

          @stephenw10 said in DIOCADDRULENV Error:

          Hmm well that would only do anything if you have NAT reflection enabled on any individual port forwards?

          If not then you may as well disable that setting.

          That bug should be fixed however so it could be something completely different just triggering the same error.

          Try running Status > Filter Reload and see where it fails.

          No errors showing today and after the filter reload.

          Initializing
          Creating aliases
          Creating gateway group item...
          Generating Limiter rules
          Generating NAT rules
          Creating 1:1 rules...
          Creating outbound NAT rules
          Creating automatic outbound rules
          Setting up TFTP helper
          Creating NAT rule Tautulli Remote
          Creating reflection NAT rule for Tautulli Remote...
          Generating filter rules
          Creating default rules
          Pre-caching pfB_DNSBL_Ping auto rule...
          Creating filter rule pfB_DNSBL_Ping auto rule ...
          Creating filter rules pfB_DNSBL_Ping auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_DNSBL_Ping auto rule
          Creating rule pfB_DNSBL_Ping auto rule
          Creating filter rule pfB_DNSBL_Ping auto rule ...
          Creating filter rules pfB_DNSBL_Ping auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_DNSBL_Ping auto rule
          Creating rule pfB_DNSBL_Ping auto rule
          Pre-caching pfB_DNSBL_Permit auto rule...
          Creating filter rule pfB_DNSBL_Permit auto rule ...
          Creating filter rules pfB_DNSBL_Permit auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_DNSBL_Permit auto rule
          Creating rule pfB_DNSBL_Permit auto rule
          Creating filter rule pfB_DNSBL_Permit auto rule ...
          Creating filter rules pfB_DNSBL_Permit auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_DNSBL_Permit auto rule
          Creating rule pfB_DNSBL_Permit auto rule
          Pre-caching pfB_Top_v4 auto rule...
          Creating filter rule pfB_Top_v4 auto rule ...
          Creating filter rules pfB_Top_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Top_v4 auto rule
          Creating rule pfB_Top_v4 auto rule
          Pre-caching pfB_Top_v6 auto rule...
          Creating filter rule pfB_Top_v6 auto rule ...
          Creating filter rules pfB_Top_v6 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Top_v6 auto rule
          Creating rule pfB_Top_v6 auto rule
          Pre-caching pfB_Asia_v4 auto rule...
          Creating filter rule pfB_Asia_v4 auto rule ...
          Creating filter rules pfB_Asia_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Asia_v4 auto rule
          Creating rule pfB_Asia_v4 auto rule
          Pre-caching pfB_Asia_v6 auto rule...
          Creating filter rule pfB_Asia_v6 auto rule ...
          Creating filter rules pfB_Asia_v6 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Asia_v6 auto rule
          Creating rule pfB_Asia_v6 auto rule
          Pre-caching pfB_Europe_v4 auto rule...
          Creating filter rule pfB_Europe_v4 auto rule ...
          Creating filter rules pfB_Europe_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Europe_v4 auto rule
          Creating rule pfB_Europe_v4 auto rule
          Pre-caching pfB_Europe_v6 auto rule...
          Creating filter rule pfB_Europe_v6 auto rule ...
          Creating filter rules pfB_Europe_v6 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_Europe_v6 auto rule
          Creating rule pfB_Europe_v6 auto rule
          Pre-caching pfB_PS_v4 auto rule...
          Creating filter rule pfB_PS_v4 auto rule ...
          Creating filter rules pfB_PS_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_PS_v4 auto rule
          Creating rule pfB_PS_v4 auto rule
          Pre-caching pfB_PRI1_v4 auto rule...
          Creating filter rule pfB_PRI1_v4 auto rule ...
          Creating filter rules pfB_PRI1_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_PRI1_v4 auto rule
          Creating rule pfB_PRI1_v4 auto rule
          Pre-caching pfB_PRI1_v4 auto rule...
          Creating filter rule pfB_PRI1_v4 auto rule ...
          Creating filter rules pfB_PRI1_v4 auto rule ...
          Setting up pass/block rules
          Setting up pass/block rules pfB_PRI1_v4 auto rule
          Creating rule pfB_PRI1_v4 auto rule
          Pre-caching ...
          Pre-caching VPN Killswitch...
          Creating filter rule VPN Killswitch ...
          Creating filter rules VPN Killswitch ...
          Setting up pass/block rules
          Setting up pass/block rules VPN Killswitch
          Creating rule VPN Killswitch
          Pre-caching Block SSH into Cameras...
          Creating filter rule Block SSH into Cameras ...
          Creating filter rules Block SSH into Cameras ...
          Setting up pass/block rules
          Setting up pass/block rules Block SSH into Cameras
          Creating rule Block SSH into Cameras
          Pre-caching ...
          Creating filter rule  ...
          Creating filter rules  ...
          Setting up pass/block rules
          Setting up pass/block rules 
          Creating rule 
          Creating filter rule  ...
          Creating filter rules  ...
          Setting up pass/block rules
          Setting up pass/block rules 
          Creating rule 
          Pre-caching Allow Wireguard...
          Creating filter rule Allow Wireguard ...
          Creating filter rules Allow Wireguard ...
          Setting up pass/block rules
          Setting up pass/block rules Allow Wireguard
          Creating rule Allow Wireguard
          Pre-caching OpenVPN HOME VPN wizard...
          Creating filter rule OpenVPN HOME VPN wizard ...
          Creating filter rules OpenVPN HOME VPN wizard ...
          Setting up pass/block rules
          Setting up pass/block rules OpenVPN HOME VPN wizard
          Creating rule OpenVPN HOME VPN wizard
          Pre-caching NAT Tautulli Remote...
          Creating filter rule NAT Tautulli Remote ...
          Creating filter rules NAT Tautulli Remote ...
          Setting up pass/block rules
          Setting up pass/block rules NAT Tautulli Remote
          Creating rule NAT Tautulli Remote
          Pre-caching Passed via EasyRule...
          Creating filter rule Passed via EasyRule ...
          Creating filter rules Passed via EasyRule ...
          Setting up pass/block rules
          Setting up pass/block rules Passed via EasyRule
          Creating rule Passed via EasyRule
          Pre-caching Passed via EasyRule...
          Creating filter rule Passed via EasyRule ...
          Creating filter rules Passed via EasyRule ...
          Setting up pass/block rules
          Setting up pass/block rules Passed via EasyRule
          Creating rule Passed via EasyRule
          Pre-caching Default allow LAN to any rule...
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Pre-caching ...
          Pre-caching ...
          Creating filter rule  ...
          Creating filter rules  ...
          Pre-caching Allow Wireguard...
          Creating filter rule Allow Wireguard ...
          Creating filter rules Allow Wireguard ...
          Setting up pass/block rules
          Setting up pass/block rules Allow Wireguard
          Creating rule Allow Wireguard
          Pre-caching OpenVPN HOME VPN wizard...
          Creating filter rule OpenVPN HOME VPN wizard ...
          Creating filter rules OpenVPN HOME VPN wizard ...
          Setting up pass/block rules
          Setting up pass/block rules OpenVPN HOME VPN wizard
          Creating rule OpenVPN HOME VPN wizard
          Pre-caching Default allow LAN to any rule...
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Pre-caching Default allow LAN to any rule...
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Pre-caching Default allow LAN to any rule...
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Pre-caching Default allow LAN to any rule...
          Creating filter rule Default allow LAN to any rule ...
          Creating filter rules Default allow LAN to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow LAN to any rule
          Creating rule Default allow LAN to any rule
          Pre-caching ...
          Creating filter rule  ...
          Creating filter rules  ...
          Setting up pass/block rules
          Setting up pass/block rules 
          Creating rule 
          Pre-caching Default allow Guest to any rule...
          Creating filter rule Default allow Guest to any rule ...
          Creating filter rules Default allow Guest to any rule ...
          Setting up pass/block rules
          Setting up pass/block rules Default allow Guest to any rule
          Creating rule Default allow Guest to any rule
          Pre-caching Block access to LAN...
          Creating filter rule Block access to LAN ...
          Creating filter rules Block access to LAN ...
          Setting up pass/block rules
          Setting up pass/block rules Block access to LAN
          Creating rule Block access to LAN
          Pre-caching Allow All...
          Creating filter rule Allow All ...
          Creating filter rules Allow All ...
          Setting up pass/block rules
          Setting up pass/block rules Allow All
          Creating rule Allow All
          Pre-caching Plex Server Access...
          Creating filter rule Plex Server Access ...
          Creating filter rules Plex Server Access ...
          Setting up pass/block rules
          Setting up pass/block rules Plex Server Access
          Creating rule Plex Server Access
          Creating IPsec rules...
          Creating uPNP rules...
          Generating ALTQ queues
          Loading filter rules
          Setting up logging information
          Setting up Ethernet filter rules...
          Setting up SCRUB information
          Processing down interface states
          Running plugins
          Done
          
          
          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Hmm, without making any changes?

            H 2 Replies Last reply Reply Quote 0
            • H
              hypnosis4u2nv @stephenw10
              last edited by

              @stephenw10 No changes. Weird..

              1 Reply Last reply Reply Quote 0
              • H
                hypnosis4u2nv @stephenw10
                last edited by

                @stephenw10 Error is back again today.

                
                There were error(s) loading the rules: pfctl: DIOCADDRULENV: No error: 0 - The line in question reads [0]: @ 2024-05-29 03:45:11
                There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-29 03:46:04
                There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-29 03:46:09
                
                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Anything else in the logs at that time or just preceding it?

                  H 1 Reply Last reply Reply Quote 0
                  • H
                    hypnosis4u2nv @stephenw10
                    last edited by

                    @stephenw10 Unfortunately timestamps dont go back that far to see. I do have this recurring error in the routing log:

                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:43	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    May 29 10:35:44	miniupnpd	94484	ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
                    

                    Also notice that snort is turning on by itself (I use suricata) even when the service is stopped. Wondering if that is contributing to this error.

                    K 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      @hypnosis4u2nv said in DIOCADDRULENV Error:

                      May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists

                      Are you running the update miniupnpd pkg?

                      How are you disabling Snort?
                      Yes, running both Snort and Suricata is not supported.

                      H 1 Reply Last reply Reply Quote 0
                      • H
                        hypnosis4u2nv @stephenw10
                        last edited by hypnosis4u2nv

                        @stephenw10 Not sure what miniupnpd pkg I'm running, For now I uninstalled the Snort package.

                        H 1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          There is an updated miniupnpd pkg available in 24.03. If you run pkg upgrade you will see it offered. It addresses this: https://redmine.pfsense.org/issues/15470

                          H 1 Reply Last reply Reply Quote 0
                          • H
                            hypnosis4u2nv @hypnosis4u2nv
                            last edited by

                            @hypnosis4u2nv updated. Will follow up to see if this error reappears. Thanks!

                            1 Reply Last reply Reply Quote 1
                            • H
                              hypnosis4u2nv @stephenw10
                              last edited by

                              @stephenw10 Update didnt work.

                              There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:21:03
                              There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:21:05
                              There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:40:07
                              
                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                @hypnosis4u2nv said in DIOCADDRULENV Error:

                                May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists

                                But you're not seeing the errors from miniupnpd?:
                                May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists

                                H 1 Reply Last reply Reply Quote 0
                                • H
                                  hypnosis4u2nv @stephenw10
                                  last edited by

                                  @stephenw10 Errors still exist in the miniupnpd

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Hmm, and those errors occur at the same time I assume?

                                    And still nothing else logged at that time? No even triggering this?

                                    H 1 Reply Last reply Reply Quote 0
                                    • H
                                      hypnosis4u2nv @stephenw10
                                      last edited by

                                      @stephenw10 The miniupnpd errors are running constantly although they don't trip error logs, just in the routing logs.

                                      The other DIOCADDRULENV error triggers an error and it seems to fluctuate when it does.

                                      stephenw10S 1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator @hypnosis4u2nv
                                        last edited by

                                        @hypnosis4u2nv said in DIOCADDRULENV Error:

                                        The miniupnpd errors are running constantly

                                        Ah, well that's an issue!

                                        Hmm, what does uname -a show? I wonder if it's somehow still running an old kernel.

                                        H 1 Reply Last reply Reply Quote 0
                                        • H
                                          hypnosis4u2nv @stephenw10
                                          last edited by

                                          @stephenw10 FreeBSD pfSense.localdomain 15.0-CURRENT FreeBSD 15.0-CURRENT #0 plus-RELENG_24_03-n256311-e71f834dd81: Fri Apr 19 00:28:14 UTC 2024 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-24_03-main/obj/amd64/Y4MAEJ2R/var/jenkins/workspace/pfSense-Plus-snapshots-24_03-main/sources/FreeBSD-src-plus-RELENG_24_03/amd64.amd64/sys/pfSense amd64

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            Konstanti @hypnosis4u2nv
                                            last edited by Konstanti

                                            @hypnosis4u2nv

                                            May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists

                                            Hi
                                            I don't know if this will help or not
                                            But, judging by the code in the kernel, this error (in fact, this is not even a global error) suggests that some program is trying to add a rule identical to the one that has already been loaded into the kernel .
                                            in this way,in my opinion, this is not a system error, but an application that is trying to make changes to a certain ruleset

                                            H 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.