Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Error(s) loading the rules // after yesterdays update // 2.0-RC2 (i386) // 26.05

    Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
    13 Posts 5 Posters 4.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • jimpJ
      jimp Rebel Alliance Developer Netgate
      last edited by

      When that file is correct, what shows up on that line?

      Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      • M
        mxx
        last edited by

        loopback = "{ lo0 }"
        WAN = "{ pppoe0 }"
        LAN = "{ em0 }"
        AON = "{ em1 }"
        OpenVPN = "{ openvpn }"

        ..

        scrub in on $WAN allĀ  Ā  fragment reassemble
        scrub in on $LAN allĀ  Ā  fragment reassemble
        scrub in on $AON allĀ  Ā  fragment reassemble

        so.. nothing ;)

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          If someone is still getting this, we'll need to see the output of this then:

          
          global $FilterIflist;
          include "filter.inc";
          include "shaper.inc";
          filter_generate_optcfg_array();
          var_dump($FilterIflist);
          

          You can paste that into the PHP execute box under Diagnostics > Command.

          Somehow an empty entry must be sneaking in there, would be nice to know what it is in order to track it down.

          Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            It would also help to know if you have any of the following enabled: PPTP server, L2TP server, PPPoE server, or IPsec.

            Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • M
              mxx
              last edited by

              Here it is:

              array(5) {
              Ā  ["wan"]=>
              Ā  array(14) {
              Ā  Ā  ["if"]=>
              Ā  Ā  string(6) "pppoe0"
              Ā  Ā  ["ip"]=>
              Ā  Ā  string(13) "[PubIP_ofWAN]"
              Ā  Ā  ["type"]=>
              Ā  Ā  string(5) "pppoe"
              Ā  Ā  ["sn"]=>
              Ā  Ā  int(32)
              Ā  Ā  ["mtu"]=>
              Ā  Ā  string(4) "1492"
              Ā  Ā  ["mss"]=>
              Ā  Ā  string(0) ""
              Ā  Ā  ["descr"]=>
              Ā  Ā  string(3) "WAN"
              Ā  Ā  ["sa"]=>
              Ā  Ā  string(13) "[PubIP_ofWAN]"
              Ā  Ā  ["nonat"]=>
              Ā  Ā  NULL
              Ā  Ā  ["alias-address"]=>
              Ā  Ā  string(0) ""
              Ā  Ā  ["alias-subnet"]=>
              Ā  Ā  string(2) "32"
              Ā  Ā  ["gateway"]=>
              Ā  Ā  NULL
              Ā  Ā  ["spoofcheck"]=>
              Ā  Ā  string(3) "yes"
              Ā  Ā  ["bridge"]=>
              Ā  Ā  NULL
              Ā  }
              Ā  ["lan"]=>
              Ā  array(13) {
              Ā  Ā  ["if"]=>
              Ā  Ā  string(3) "em0"
              Ā  Ā  ["ip"]=>
              Ā  Ā  string(11) "192.168.1.1"
              Ā  Ā  ["sn"]=>
              Ā  Ā  int(24)
              Ā  Ā  ["mtu"]=>
              Ā  Ā  int(1500)
              Ā  Ā  ["mss"]=>
              Ā  Ā  string(0) ""
              Ā  Ā  ["descr"]=>
              Ā  Ā  string(3) "LAN"
              Ā  Ā  ["sa"]=>
              Ā  Ā  string(11) "192.168.1.0"
              Ā  Ā  ["nonat"]=>
              Ā  Ā  NULL
              Ā  Ā  ["alias-address"]=>
              Ā  Ā  NULL
              Ā  Ā  ["alias-subnet"]=>
              Ā  Ā  NULL
              Ā  Ā  ["gateway"]=>
              Ā  Ā  NULL
              Ā  Ā  ["spoofcheck"]=>
              Ā  Ā  string(3) "yes"
              Ā  Ā  ["bridge"]=>
              Ā  Ā  NULL
              Ā  }
              Ā  ["opt1"]=>
              Ā  array(13) {
              Ā  Ā  ["if"]=>
              Ā  Ā  string(3) "em1"
              Ā  Ā  ["ip"]=>
              Ā  Ā  string(14) "[PubIP_ofOpt1]"
              Ā  Ā  ["sn"]=>
              Ā  Ā  int(30)
              Ā  Ā  ["mtu"]=>
              Ā  Ā  int(1500)
              Ā  Ā  ["mss"]=>
              Ā  Ā  string(0) ""
              Ā  Ā  ["descr"]=>
              Ā  Ā  string(3) "AON"
              Ā  Ā  ["sa"]=>
              Ā  Ā  string(14) "[IPofNETAddressofOpt1]"
              Ā  Ā  ["nonat"]=>
              Ā  Ā  NULL
              Ā  Ā  ["alias-address"]=>
              Ā  Ā  NULL
              Ā  Ā  ["alias-subnet"]=>
              Ā  Ā  NULL
              Ā  Ā  ["gateway"]=>
              Ā  Ā  string(5) "AONGW"
              Ā  Ā  ["spoofcheck"]=>
              Ā  Ā  string(3) "yes"
              Ā  Ā  ["bridge"]=>
              Ā  Ā  NULL
              Ā  }
              Ā  ["pppoe"]=>
              Ā  array(0) {
              Ā  }
              Ā  ["openvpn"]=>
              Ā  array(4) {
              Ā  Ā  ["if"]=>
              Ā  Ā  string(7) "openvpn"
              Ā  Ā  ["descr"]=>
              Ā  Ā  string(7) "OpenVPN"
              Ā  Ā  ["type"]=>
              Ā  Ā  string(4) "none"
              Ā  Ā  ["virtual"]=>
              Ā  Ā  bool(true)
              Ā  }
              }
              
              

              I have an ipsec tunnel configured, but it's inactive (enable ipsec is not checked)

              1 Reply Last reply Reply Quote 0
              • jimpJ
                jimp Rebel Alliance Developer Netgate
                last edited by

                Looks like you have a pppoe server entry that's empty.

                I added some protections against that just now. Should be fixed in the next snapshot, or you can gitsync now and pull in the change

                https://github.com/bsdperimeter/pfsense/compare/a1b86994a0…f40a03a45c

                Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                Need help fast? Netgate Global Support!

                Do not Chat/PM for help!

                1 Reply Last reply Reply Quote 0
                • M
                  mxx
                  last edited by

                  Very strange.. never set one up.

                  I'll gitsync and report back

                  thank you very much :)

                  1 Reply Last reply Reply Quote 0
                  • M
                    mxx
                    last edited by

                    GREAT!
                    Your commit did it ;)

                    Thank you very much!

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      new snap is building now that has those commits in it, so it should be OK once it uploads later this evening.

                      Remember: Upvote with the šŸ‘ button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • P
                        px
                        last edited by

                        @jimp:

                        new snap is building now that has those commits in it, so it should be OK once it uploads later this evening.

                        Awesome, thanks!
                        This issue creeped up on me Monday's daily build.Ā  Decided to come post about it today. Been trying new dailies all week waiting for a fix. Each time after a rule change, manually editing out the empty or erred rules in /tmp/rules.debug
                        and reloading the rules from the shell.

                        pfctl -f /tmp/rules.debug
                        
                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.