Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    RuleError:There were errors loading the rules: /tmp/rules.debug:18: cannot alloc

    Scheduled Pinned Locked Moved General pfSense Questions
    25 Posts 17 Posters 67.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      barbarin
      last edited by

      I have the same problem on 4 pfsense servers, yesterday reinstall one and today 3 more shows the errors!!!! I suspect it's a hacking problem….

      Any can help us??

      Thanks.

      1 Reply Last reply Reply Quote 0
      • jahonixJ
        jahonix
        last edited by

        That's not a hacking problem, it's an upgrade glitch.
        Several others reported this already so watch the forum and read what other threads come up with.

        1 Reply Last reply Reply Quote 0
        • DerelictD
          Derelict LAYER 8 Netgate
          last edited by

          Not hacking ffs.

          Do a forum search.

          Increase the Firewall Maximum Table Entries size to 400000 in System > Advanced, Firewall & NAT

          Chattanooga, Tennessee, USA
          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
          Do Not Chat For Help! NO_WAN_EGRESS(TM)

          1 Reply Last reply Reply Quote 5
          • B
            barbarin
            last edited by

            Thanks Derelict, I make a search but don´t see the answer, sorry for that…

            Again thanks to all.

            Greetings...

            1 Reply Last reply Reply Quote 0
            • KOMK
              KOM
              last edited by

              Not hacking ffs.

              No, I'm pretty sure it's hacking.  It's always hacking.  ;D

              1 Reply Last reply Reply Quote 1
              • T
                toms88
                last edited by

                Thanks all, il give that a try and see if it helps.

                1 Reply Last reply Reply Quote 0
                • K
                  kyawwinhtun
                  last edited by

                  @Derelict:

                  Not hacking ffs.

                  Do a forum search.

                  Increase the Firewall Maximum Table Entries size to 400000 in System > Advanced, Firewall & NAT

                  It Works Well!!!!!!Thanks  :D

                  1 Reply Last reply Reply Quote 1
                  • C
                    csandoval012
                    last edited by

                    mine is on default
                    Maximum number of connections to hold in the firewall state table.
                    Note: Leave this blank for the default. On this system the default size is: 4909000

                    should I put more than that?

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate
                      last edited by

                      It is not the Firewall Maximum States entry it is the Firewall Maximum Table Entries setting. Set it to 400000.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • E
                        eddie4
                        last edited by

                        Jeej fixed my problem!!!!

                        1 Reply Last reply Reply Quote 0
                        • F
                          Floppie
                          last edited by

                          @Derelict:

                          Not hacking ffs.

                          Do a forum search.

                          Increase the Firewall Maximum Table Entries size to 400000 in System > Advanced, Firewall & NAT

                          This solved it for me after losing NAT port forwarding during a reboot this morning.  Thanks!

                          1 Reply Last reply Reply Quote 0
                          • I
                            irfanit02gmail.com
                            last edited by

                            @Derelict:

                            Not hacking ffs.

                            Do a forum search.

                            Increase the Firewall Maximum Table Entries size to 400000 in System > Advanced, Firewall & NAT

                            =================================

                            Post increasing the Firewall Maximum Table Entries size to 400000 , all rules started working.. Thanks buddy.. i helped a lot..

                            1 Reply Last reply Reply Quote 0
                            • I
                              itlogicsystems
                              last edited by

                              Thanks so much for the input!  the changing of the 'max table entries' size to 400k did the trick!!

                              1 Reply Last reply Reply Quote 0
                              • A
                                aagaag
                                last edited by

                                Just wanted to say that I got the same message today, although my system says that its default is 6 million entries.

                                1 Reply Last reply Reply Quote 0
                                • DerelictD
                                  Derelict LAYER 8 Netgate
                                  last edited by

                                  Set it to 400000.

                                  Chattanooga, Tennessee, USA
                                  A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                  DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                  Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                  B 1 Reply Last reply Reply Quote 0
                                  • D
                                    DrRobe
                                    last edited by

                                    Worked perfectly, thank you!

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      Bon Jovi @Derelict
                                      last edited by

                                      @derelict hello, i have set it in 400000 and even don't work. Can you suggest any other solution, please?

                                      1 Reply Last reply Reply Quote 0
                                      • jimpJ
                                        jimp Rebel Alliance Developer Netgate
                                        last edited by

                                        Use a bigger number. Try 2000000.

                                        If you have a lot of table entries (especially with pfBlockerNG) you might need that or more.

                                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                        Need help fast? Netgate Global Support!

                                        Do not Chat/PM for help!

                                        Sergei_ShablovskyS 1 Reply Last reply Reply Quote 3
                                        • DerelictD
                                          Derelict LAYER 8 Netgate
                                          last edited by

                                          And be sure you're changing the right value. People, for some reason, seem to confuse Maximum States and Maximum Table Entries. Maximum Table Entries is what you want to change here.

                                          Chattanooga, Tennessee, USA
                                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                                          1 Reply Last reply Reply Quote 0
                                          • K
                                            Khampol
                                            last edited by

                                            ok that works !
                                            ps : if i put it to 500000 ? is there any pb ? 😂

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.