RuleError:There were errors loading the rules: /tmp/rules.debug:18: cannot alloc

irfanit02gmail.com

Not hacking ffs.

Do a forum search.

Increase the Firewall Maximum Table Entries size to 400000 in System > Advanced, Firewall & NAT

=================================

Post increasing the Firewall Maximum Table Entries size to 400000 , all rules started working.. Thanks buddy.. i helped a lot..

itlogicsystems

Thanks so much for the input! the changing of the 'max table entries' size to 400k did the trick!!

aagaag

Just wanted to say that I got the same message today, although my system says that its default is 6 million entries.

Derelict

Set it to 400000.

DrRobe

Worked perfectly, thank you!

Bon Jovi

@derelict hello, i have set it in 400000 and even don't work. Can you suggest any other solution, please?

jimp

Use a bigger number. Try 2000000.

If you have a lot of table entries (especially with pfBlockerNG) you might need that or more.

Derelict

And be sure you're changing the right value. People, for some reason, seem to confuse Maximum States and Maximum Table Entries. Maximum Table Entries is what you want to change here.

Khampol

ok that works !
ps : if i put it to 500000 ? is there any pb ?

Derelict

500000 should be fine.

Khampol

@Derelict Ok got it. Thx ! :)

Sergei_Shablovsky

@jimp said in RuleError:There were errors loading the rules: /tmp/rules.debug:18: cannot alloc:

Use a bigger number. Try 2000000.

If you have a lot of table entries (especially with pfBlockerNG) you might need that or more.

How this value correspond or depend to total amount of avail for FreeBSD system memory ?

Please point me on a source where described in details how important for network operations resources like

NICs controllers (CPU, memory on controllers, number of Eth ports on each controller);
whole appliance memory amount;
main appliance CPU;
and
memory/network/cpu core settings in FreeBSD;
influence on pfSense speed, troughtput and stability of operation.

Common words are less interesting than numbers, of course :)

Thank You!

jimp

Make your own thread instead of posting to a mostly-irrelevant nearly year-old thread.