Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense 2.2 crashes (hard) when accessing Web Configurator from remote IPsec VPN

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    36 Posts 15 Posters 12.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G Offline
      georgeman
      last edited by

      This is a VERY serious problem. Here's another topic which I bet is related: https://forum.pfsense.org/index.php?topic=88606

      I guess you can try what's suggested there. I'm also expericing crashes but couldn't find a specific trigger

      If it ain't broke, you haven't tampered enough with it

      1 Reply Last reply Reply Quote 0
      • S Offline
        sgorbach
        last edited by

        I've seen the same issue on v2.2 over VMware (both ends virtual, IPSec between them), so it's not a hardware problem. Worked fine for years on v2.0x before, even on beta versions and on the same host hardware.
        In my case it SEEMS to be fixed by disabling IPcomp (IP Compression) on the Advanced tab under IPsec, and begins to fail again with a double fault as soon as I re-enable compression. Went from crashing more than once per hour to staying stable for more than 24h and counting.
        I already submitted one of the crash dumps for evaluation.

        1 Reply Last reply Reply Quote 0
        • V Offline
          volandg
          last edited by

          Should we report this as possible  bug on pfSense bugtracker and refer to this thread ?

          1 Reply Last reply Reply Quote 0
          • E Offline
            edinburgh1874
            last edited by

            Exact same issue here on a Sokeris net6501. Does anyone know if this is in the bug tracker? I had a look but couldn't see it.

            1 Reply Last reply Reply Quote 0
            • V Offline
              volandg
              last edited by

              Just completed the upgrade to 2.2.1.

              The issue is still there. Accessing the webUI while connected over IPSec VPN will crash the box.

              1 Reply Last reply Reply Quote 0
              • V Offline
                volandg
                last edited by

                https://redmine.pfsense.org/issues/4537

                1 Reply Last reply Reply Quote 0
                • G Offline
                  georgeman
                  last edited by

                  Could you all test by setting net.inet.ipsec.directdispatch to 0 as ermal outlined in this post? I believe this is all the same issue

                  If it ain't broke, you haven't tampered enough with it

                  1 Reply Last reply Reply Quote 0
                  • L Offline
                    lxa
                    last edited by

                    I think I ran into the same problem (2.2.1-RELEASE on AMD G-T40E) and submitted a few crash dumps.

                    I set net.inet.ipsec.directdispatch to 0 and have not had another crash since then.

                    1 Reply Last reply Reply Quote 0
                    • N Offline
                      nambi
                      last edited by

                      I have the exact same issue, my remote pfsense instantly crashes when I access it via remote ip. if I remote desktop to the server on the local network, I can access the box, but using ipsec and accessing the box from a different subnet the box crashes. I removed all squid and squid guard rebooted and It still crashes.

                      1 Reply Last reply Reply Quote 0
                      • KOMK Offline
                        KOM
                        last edited by

                        Nambi, did you try the fix that georgeman suggested??

                        1 Reply Last reply Reply Quote 0
                        • N Offline
                          nambi
                          last edited by

                          I'm not too sure how to enter in that command.

                          do i add this into this the "Execute Shell command"
                          net.inet.ipsec.directdispatch=0

                          I entered this in there, but when I remote connected it still crashed I probably didn't put it in properly.

                          Thanks for the assistance.

                          1 Reply Last reply Reply Quote 0
                          • KOMK Offline
                            KOM
                            last edited by

                            I'm not too sure how to enter in that command.

                            System - Advanced - System Tunables

                            1 Reply Last reply Reply Quote 0
                            • N Offline
                              nambi
                              last edited by

                              Thank you, there was no entry so i added "net.inet.ipsec.directdispatch" and set it to 0 and this fixed the issue.

                              Thanks for your patience.

                              1 Reply Last reply Reply Quote 0
                              • G Offline
                                georgeman
                                last edited by

                                Go to System, Advanced and enter it as a tunable. Reboot just in case and test again

                                Are you on 32-bit??

                                If it ain't broke, you haven't tampered enough with it

                                1 Reply Last reply Reply Quote 0
                                • N Offline
                                  nambi
                                  last edited by

                                  yes we are running 32 bit, ,my system is capable for 64 bit, but I installed pfsesne a while back when 32 bit was the norm.

                                  1 Reply Last reply Reply Quote 0
                                  • G Offline
                                    georgeman
                                    last edited by

                                    Alright, it is confirmed to be the same issue then, thanks

                                    If it ain't broke, you haven't tampered enough with it

                                    1 Reply Last reply Reply Quote 0
                                    • W Offline
                                      wazadex
                                      last edited by

                                      @georgeman:

                                      Alright, it is confirmed to be the same issue then, thanks

                                      thanks it works ! :)

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.