DIOCADDRULENV Error
-
@stephenw10 No.
@stephenw10 said in DIOCADDRULENV Error:
Hmm well that would only do anything if you have NAT reflection enabled on any individual port forwards?
If not then you may as well disable that setting.
That bug should be fixed however so it could be something completely different just triggering the same error.
Try running Status > Filter Reload and see where it fails.
No errors showing today and after the filter reload.
Initializing Creating aliases Creating gateway group item... Generating Limiter rules Generating NAT rules Creating 1:1 rules... Creating outbound NAT rules Creating automatic outbound rules Setting up TFTP helper Creating NAT rule Tautulli Remote Creating reflection NAT rule for Tautulli Remote... Generating filter rules Creating default rules Pre-caching pfB_DNSBL_Ping auto rule... Creating filter rule pfB_DNSBL_Ping auto rule ... Creating filter rules pfB_DNSBL_Ping auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_DNSBL_Ping auto rule Creating rule pfB_DNSBL_Ping auto rule Creating filter rule pfB_DNSBL_Ping auto rule ... Creating filter rules pfB_DNSBL_Ping auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_DNSBL_Ping auto rule Creating rule pfB_DNSBL_Ping auto rule Pre-caching pfB_DNSBL_Permit auto rule... Creating filter rule pfB_DNSBL_Permit auto rule ... Creating filter rules pfB_DNSBL_Permit auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_DNSBL_Permit auto rule Creating rule pfB_DNSBL_Permit auto rule Creating filter rule pfB_DNSBL_Permit auto rule ... Creating filter rules pfB_DNSBL_Permit auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_DNSBL_Permit auto rule Creating rule pfB_DNSBL_Permit auto rule Pre-caching pfB_Top_v4 auto rule... Creating filter rule pfB_Top_v4 auto rule ... Creating filter rules pfB_Top_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Top_v4 auto rule Creating rule pfB_Top_v4 auto rule Pre-caching pfB_Top_v6 auto rule... Creating filter rule pfB_Top_v6 auto rule ... Creating filter rules pfB_Top_v6 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Top_v6 auto rule Creating rule pfB_Top_v6 auto rule Pre-caching pfB_Asia_v4 auto rule... Creating filter rule pfB_Asia_v4 auto rule ... Creating filter rules pfB_Asia_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Asia_v4 auto rule Creating rule pfB_Asia_v4 auto rule Pre-caching pfB_Asia_v6 auto rule... Creating filter rule pfB_Asia_v6 auto rule ... Creating filter rules pfB_Asia_v6 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Asia_v6 auto rule Creating rule pfB_Asia_v6 auto rule Pre-caching pfB_Europe_v4 auto rule... Creating filter rule pfB_Europe_v4 auto rule ... Creating filter rules pfB_Europe_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Europe_v4 auto rule Creating rule pfB_Europe_v4 auto rule Pre-caching pfB_Europe_v6 auto rule... Creating filter rule pfB_Europe_v6 auto rule ... Creating filter rules pfB_Europe_v6 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_Europe_v6 auto rule Creating rule pfB_Europe_v6 auto rule Pre-caching pfB_PS_v4 auto rule... Creating filter rule pfB_PS_v4 auto rule ... Creating filter rules pfB_PS_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_PS_v4 auto rule Creating rule pfB_PS_v4 auto rule Pre-caching pfB_PRI1_v4 auto rule... Creating filter rule pfB_PRI1_v4 auto rule ... Creating filter rules pfB_PRI1_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_PRI1_v4 auto rule Creating rule pfB_PRI1_v4 auto rule Pre-caching pfB_PRI1_v4 auto rule... Creating filter rule pfB_PRI1_v4 auto rule ... Creating filter rules pfB_PRI1_v4 auto rule ... Setting up pass/block rules Setting up pass/block rules pfB_PRI1_v4 auto rule Creating rule pfB_PRI1_v4 auto rule Pre-caching ... Pre-caching VPN Killswitch... Creating filter rule VPN Killswitch ... Creating filter rules VPN Killswitch ... Setting up pass/block rules Setting up pass/block rules VPN Killswitch Creating rule VPN Killswitch Pre-caching Block SSH into Cameras... Creating filter rule Block SSH into Cameras ... Creating filter rules Block SSH into Cameras ... Setting up pass/block rules Setting up pass/block rules Block SSH into Cameras Creating rule Block SSH into Cameras Pre-caching ... Creating filter rule ... Creating filter rules ... Setting up pass/block rules Setting up pass/block rules Creating rule Creating filter rule ... Creating filter rules ... Setting up pass/block rules Setting up pass/block rules Creating rule Pre-caching Allow Wireguard... Creating filter rule Allow Wireguard ... Creating filter rules Allow Wireguard ... Setting up pass/block rules Setting up pass/block rules Allow Wireguard Creating rule Allow Wireguard Pre-caching OpenVPN HOME VPN wizard... Creating filter rule OpenVPN HOME VPN wizard ... Creating filter rules OpenVPN HOME VPN wizard ... Setting up pass/block rules Setting up pass/block rules OpenVPN HOME VPN wizard Creating rule OpenVPN HOME VPN wizard Pre-caching NAT Tautulli Remote... Creating filter rule NAT Tautulli Remote ... Creating filter rules NAT Tautulli Remote ... Setting up pass/block rules Setting up pass/block rules NAT Tautulli Remote Creating rule NAT Tautulli Remote Pre-caching Passed via EasyRule... Creating filter rule Passed via EasyRule ... Creating filter rules Passed via EasyRule ... Setting up pass/block rules Setting up pass/block rules Passed via EasyRule Creating rule Passed via EasyRule Pre-caching Passed via EasyRule... Creating filter rule Passed via EasyRule ... Creating filter rules Passed via EasyRule ... Setting up pass/block rules Setting up pass/block rules Passed via EasyRule Creating rule Passed via EasyRule Pre-caching Default allow LAN to any rule... Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Pre-caching ... Pre-caching ... Creating filter rule ... Creating filter rules ... Pre-caching Allow Wireguard... Creating filter rule Allow Wireguard ... Creating filter rules Allow Wireguard ... Setting up pass/block rules Setting up pass/block rules Allow Wireguard Creating rule Allow Wireguard Pre-caching OpenVPN HOME VPN wizard... Creating filter rule OpenVPN HOME VPN wizard ... Creating filter rules OpenVPN HOME VPN wizard ... Setting up pass/block rules Setting up pass/block rules OpenVPN HOME VPN wizard Creating rule OpenVPN HOME VPN wizard Pre-caching Default allow LAN to any rule... Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Pre-caching Default allow LAN to any rule... Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Pre-caching Default allow LAN to any rule... Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Pre-caching Default allow LAN to any rule... Creating filter rule Default allow LAN to any rule ... Creating filter rules Default allow LAN to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow LAN to any rule Creating rule Default allow LAN to any rule Pre-caching ... Creating filter rule ... Creating filter rules ... Setting up pass/block rules Setting up pass/block rules Creating rule Pre-caching Default allow Guest to any rule... Creating filter rule Default allow Guest to any rule ... Creating filter rules Default allow Guest to any rule ... Setting up pass/block rules Setting up pass/block rules Default allow Guest to any rule Creating rule Default allow Guest to any rule Pre-caching Block access to LAN... Creating filter rule Block access to LAN ... Creating filter rules Block access to LAN ... Setting up pass/block rules Setting up pass/block rules Block access to LAN Creating rule Block access to LAN Pre-caching Allow All... Creating filter rule Allow All ... Creating filter rules Allow All ... Setting up pass/block rules Setting up pass/block rules Allow All Creating rule Allow All Pre-caching Plex Server Access... Creating filter rule Plex Server Access ... Creating filter rules Plex Server Access ... Setting up pass/block rules Setting up pass/block rules Plex Server Access Creating rule Plex Server Access Creating IPsec rules... Creating uPNP rules... Generating ALTQ queues Loading filter rules Setting up logging information Setting up Ethernet filter rules... Setting up SCRUB information Processing down interface states Running plugins Done -
Hmm, without making any changes?
-
@stephenw10 No changes. Weird..
-
@stephenw10 Error is back again today.
There were error(s) loading the rules: pfctl: DIOCADDRULENV: No error: 0 - The line in question reads [0]: @ 2024-05-29 03:45:11 There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-29 03:46:04 There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-29 03:46:09 -
Anything else in the logs at that time or just preceding it?
-
@stephenw10 Unfortunately timestamps dont go back that far to see. I do have this recurring error in the routing log:
May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File existsAlso notice that snort is turning on by itself (I use suricata) even when the service is stopped. Wondering if that is contributing to this error.
-
@hypnosis4u2nv said in DIOCADDRULENV Error:
May 29 10:35:43 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
Are you running the update miniupnpd pkg?
How are you disabling Snort?
Yes, running both Snort and Suricata is not supported. -
@stephenw10 Not sure what miniupnpd pkg I'm running, For now I uninstalled the Snort package.
-
There is an updated miniupnpd pkg available in 24.03. If you run
pkg upgradeyou will see it offered. It addresses this: https://redmine.pfsense.org/issues/15470 -
@hypnosis4u2nv updated. Will follow up to see if this error reappears. Thanks!
-
@stephenw10 Update didnt work.
There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:21:03 There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:21:05 There were error(s) loading the rules: pfctl: DIOCADDRULENV: No such file or directory - The line in question reads [0]: @ 2024-05-30 12:40:07 -
@hypnosis4u2nv said in DIOCADDRULENV Error:
May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
But you're not seeing the errors from miniupnpd?:
May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists -
@stephenw10 Errors still exist in the miniupnpd
-
Hmm, and those errors occur at the same time I assume?
And still nothing else logged at that time? No even triggering this?
-
@stephenw10 The miniupnpd errors are running constantly although they don't trip error logs, just in the routing logs.
The other DIOCADDRULENV error triggers an error and it seems to fluctuate when it does.
-
@hypnosis4u2nv said in DIOCADDRULENV Error:
The miniupnpd errors are running constantly
Ah, well that's an issue!
Hmm, what does
uname -ashow? I wonder if it's somehow still running an old kernel. -
@stephenw10 FreeBSD pfSense.localdomain 15.0-CURRENT FreeBSD 15.0-CURRENT #0 plus-RELENG_24_03-n256311-e71f834dd81: Fri Apr 19 00:28:14 UTC 2024 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-24_03-main/obj/amd64/Y4MAEJ2R/var/jenkins/workspace/pfSense-Plus-snapshots-24_03-main/sources/FreeBSD-src-plus-RELENG_24_03/amd64.amd64/sys/pfSense amd64
-
May 29 10:35:44 miniupnpd 94484 ioctl(dev, DIOCCHANGERULE, ...) PF_CHANGE_ADD_TAIL: File exists
Hi
I don't know if this will help or not
But, judging by the code in the kernel, this error (in fact, this is not even a global error) suggests that some program is trying to add a rule identical to the one that has already been loaded into the kernel .
in this way,in my opinion, this is not a system error, but an application that is trying to make changes to a certain ruleset -
@Konstanti conflict between pfblocker and suricata or my current rules conflicting with either of them?
-
More like a UPnP application in some downstream client trying to open the same port forward repeatedly.
However I would have thought miniupnpd would know that and not try to open it. Some more useful error in that situation seems likely.
