Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Cannot Forward Port range in PFSense 2.0

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    19 Posts 5 Posters 6.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      DeMiNe0
      last edited by

      I get the following error in my log when I make a ranged port set for forwards.

      Dec 23 19:48:39 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:79: unknown port 22300-22399 pfctl: Syntax error in config file: pf rules not loaded'
      Dec 23 19:48:39 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:79: unknown port 22300-22399 pfctl: Syntax error in config file: pf rules not loaded The line in question reads [79]: rdr on fxp0 proto tcp from any to 192.168.155.149 port 22300-22399 -> $DI0SRV0101 port 22300
      Dec 23 19:48:39 php: : There were error(s) loading the rules: /tmp/rules.debug:79: unknown port 22300-22399 pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [79]: rdr on fxp0 proto tcp from any to 192.168.155.149 port 22300-22399 -> $DI0SRV0101 port 22300

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        The snapshot built in the middle of a set of commits, apparently.

        It's already fixed in git. Either wait and update to the next snapshot or do a gitsync from the console.

        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • D
          DeMiNe0
          last edited by

          Ah ha. Glad I was able to bring that small bug to the surface then. Is there an article on using gitsync? Or do I just console the machine it's running on, and type gitsync into the developer console?

          I'm new to using pfsense, and I'm currently just testing it out.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            If you've never done a gitsync before, you will need to go to a standard shell on the console (opt 8 ) and run:

            pkg_add -r git

            Then exit out of there, and choose the PHP/Developer shell and type

            playback gitsync master

            That should pull in the latest commits to the tree.

            Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • D
              DeMiNe0
              last edited by

              This is strange. When i do the pkg_add -r git in the shell, it will get up too
              "Fetching ftp://ftp.freebsd.org/pub/FreeBSD/ports/i386/packages-8.0-release/All/python26-2.6.2_3.tbzโ€ฆ"

              And not do anything else after that. It's been sitting here like that for about an hour.

              I also tried reinstalling pfsense 2.0 as a fresh install, and I still get the same result.

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                Huh. I just did that pkg_add -r git on a box yesterday and it worked, haven't had a fresh 2.0 box to try today.

                If a process on FreeBSD (or pfSense, of course) appears to be "stuck" you can always hit ctrl-T to signal the process to print a status update to the terminal.

                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • D
                  DeMiNe0
                  last edited by

                  When I press CTRL+T, it looks to be stuck on "extracting +CONTENTS" If i do CTRL+T again, I get
                  "load 0.00 cmd : bsdtar 1440 [piperd] 503.47r 630u 0.60s 0% 2320k"

                  1 Reply Last reply Reply Quote 0
                  • jimpJ
                    jimp Rebel Alliance Developer Netgate
                    last edited by

                    Hmm, you'd think it would throw an error rather than just stalling

                    Is this a full install or nanobsd?

                    Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                    Need help fast? Netgate Global Support!

                    Do not Chat/PM for help!

                    1 Reply Last reply Reply Quote 0
                    • D
                      DeMiNe0
                      last edited by

                      This is a full install.

                      I just did another reinstall of pfsense 2.0, and instead of installing the git package, I went and ran "playback git master". It looks like it ran, but I noticed an error at the end. It scrolled past too fast for me to see. So I'm not sure if I have the latest version yet.

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        I guess that depends on the error, really.

                        It may be better to wait and just upgrade to the next snapshot that comes out (or which has probably come out overnight)

                        Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • D
                          DeMiNe0
                          last edited by

                          Sounds like a plan. THe snapshot should of come out by now. I'll give that one a shot.

                          1 Reply Last reply Reply Quote 0
                          • D
                            DeMiNe0
                            last edited by

                            I used the auto updater to update to the latest snapshot, and everything seems to be working fine.

                            1 Reply Last reply Reply Quote 0
                            • _
                              _igor_
                              last edited by

                              I did that and it worked so like a charm. The only thing I noticed was this:

                              ===> Signaling PHP and Lighty restartโ€ฆ

                              Warning: Invalid argument supplied for foreach() in /usr/local/sbin/pfSsh.php(334) : eval()'d code on line 261
                              ===> Checkout complete.

                              Your system is now sync'd and PHP and Lighty will be restarted in 5 seconds.

                              pfSense shell: Terminated

                              1 Reply Last reply Reply Quote 0
                              • jimpJ
                                jimp Rebel Alliance Developer Netgate
                                last edited by

                                igor,

                                I think that was a bug in a previous snapshot which was fixed since then. I saw that once but haven't seen it again on subsequent gitsync runs.

                                Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                Need help fast? Netgate Global Support!

                                Do not Chat/PM for help!

                                1 Reply Last reply Reply Quote 0
                                • X
                                  xbipin
                                  last edited by

                                  i have port forwarded to lan clients and rules present under wan firewall rules but systemlog keeps reporting this so is it the same thing to with the port forward or something else?

                                  inetd[377]: 28184/udp: unknown service

                                  1 Reply Last reply Reply Quote 0
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    That would probably be from NAT reflection.

                                    Try with NAT reflection disabled, if the message goes away and then comes back when you turn NAT reflection on again, it may be worthy of opening a bug report.

                                    Remember: Upvote with the ๐Ÿ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    1 Reply Last reply Reply Quote 0
                                    • X
                                      xbipin
                                      last edited by

                                      with nat reflection disabled, the message seems to have gone

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        cmb
                                        last edited by

                                        That "unknown service" message was a consequence of a reflection bug that was fixed yesterday.

                                        1 Reply Last reply Reply Quote 0
                                        • X
                                          xbipin
                                          last edited by

                                          ill test it with the 28th december snapshot

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.