Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    [2.2.1-DEVEL] filter_generate_port: 1194 is not a valid destination port

    Development
    3
    5
    1.3k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      doktornotor Banned
      last edited by

      What's this noise supposed to mean?

      
Mar 5 21:25:32	php-fpm[63724]: /rc.filter_configure_sync: filter_generate_port: 1194 is not a valid destination port.
Mar 5 21:25:32	php-fpm[63724]: /rc.filter_configure_sync: filter_generate_port: 3493 is not a valid destination port.
Mar 5 21:25:32	php-fpm[63724]: /rc.filter_configure_sync: filter_generate_port: 1194 is not a valid destination port.
Mar 5 21:25:31	php-fpm[63724]: /rc.filter_configure_sync: filter_generate_port: 3493 is not a valid destination port.
Mar 5 21:25:30	check_reload_status: Reloading filter

      This is a fully gitsynced box with recent 2.2.1 snapshot. There's OpenVPN server running on port 1194, and there's a NAT rule for NUT on LAN.

      1 Reply Last reply Reply Quote 0
      • P
        phil.davis
        last edited by

        This extra validation in /etc/inc/util.inc function alias_expand($name) broke that:
        https://github.com/pfsense/pfsense/commit/9bfb45ab2810edd13c3799510f5d090d01f82791

        As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
        If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

        1 Reply Last reply Reply Quote 0
        • P
          phil.davis
          last edited by

          And this should make it happier:
          https://github.com/pfsense/pfsense/pull/1543

          As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
          If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

          1 Reply Last reply Reply Quote 0
          • C
            cmb
            last edited by

            Thanks for the catch doktornotor and Phil. I overlooked that when making the change to skip numeric-only alias names since those are no longer valid in the ruleset.

            I merged the pull request, next snapshot run will start in a bit.

            1 Reply Last reply Reply Quote 0
            • D
              doktornotor Banned
              last edited by

              Fixed, thanks.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.