pfSense rebooting randomly?

RyanM

I had this problem (or a similar one) a couple years ago and asked about it here: pfSense rebooted by root?.

It seems that when I upgraded to 2.4.4 the reboots seemed to go away or happen much less frequently.

So I upgraded to 2.4.5 a week or so ago and now my router seems to be dropping internet and rebooting again.

Here is the system log. Notice on row 294 the reboot seems to start for no reason.

Here are the relevant lines:

Apr 13 16:52:01	kernel		All buffers synced.
Apr 13 16:52:01	kernel		Syncing disks, vnodes remaining... 7 0 0 done
Apr 13 16:52:01	kernel		Waiting (max 60 seconds) for system process `syncer' to stop...
Apr 13 16:52:01	kernel		Waiting (max 60 seconds) for system process `bufdaemon' to stop... done
Apr 13 16:52:01	kernel		Waiting (max 60 seconds) for system process `vnlru' to stop... done
Apr 13 16:52:01	kernel		ovpnc3: link state changed to DOWN
Apr 13 16:52:01	kernel		pflog0: promiscuous mode disabled
Apr 13 16:52:01	syslogd		kernel boot file is /boot/kernel/kernel
Apr 13 16:51:00	syslogd		exiting on signal 15
Apr 13 16:51:00	reboot		rebooted by root
Apr 13 16:50:28	php-fpm	95634	/index.php: Successful login for user 'admin' from: 192.168.1.148 (Local Database)
Apr 13 12:30:23	php-cgi		rc.update_urltables: /etc/rc.update_urltables: pfB_PRI1_v4 does not need updating.
Apr 13 12:30:23	php-cgi		rc.update_urltables: /etc/rc.update_urltables: pfB_Valve_v4 does not need updating.
Apr 13 12:30:23	php-cgi		rc.update_urltables: /etc/rc.update_urltables: pfB_Netflix_v4 does not need updating.
Apr 13 12:30:23	php-cgi		rc.update_urltables: /etc/rc.update_urltables: pfB_AmazonAWS_v4 does not need updating.
Apr 13 12:30:23	php-cgi		rc.update_urltables: /etc/rc.update_urltables: Starting URL table alias updates
Apr 13 12:30:00	php-cgi		rc.update_urltables: /etc/rc.update_urltables: Sleeping for 23 seconds.
Apr 13 12:30:00	php-cgi		rc.update_urltables: /etc/rc.update_urltables: Starting up.
Apr 13 11:12:31	php-fpm	77063	/index.php: Successful login for user 'admin' from: 192.168.1.230 (Local Database)
Apr 13 10:02:12	kernel		arp: packet with unknown hardware format 0x2048 received on em0

Running on a mini-pc running Intel Atom CPU E3845 w/ 4gb ram and 32gb of storage.

I have iperf, nut, pfBlockerNG-devel, and RRD_Summary packages installed. I just installed the cron package so I could see if anything is running.

Here is the crontab:
router cron.png

Gertjan

No reason ?

The admin logged in :
Successful login for user 'admin' from: 192.168.1.148 (Local Database)

The admin has 'root' rights'.

32 seconds later the reboot command was executed.
That's a command, not a crash.

Go have a talk with the owner of PC which has IP 192.168.1.148

edit : it's worse.

This :

is not pfSense, but some local user thing.

Surprise.

RyanM

@Gertjan yeah, I think the issue was the ping_check.sh script. I was having issues a while ago with my WAN interface not renewing my IP. Someone suggested this script to address that. I have removed that cron job.

As for 192.168.1.148, this is my iPhone. What will typically happen is we will be watching our Roku and the video will pause. I will then use my phone or tablet to login to pfSense to see what is happening. Sometimes I can login and then pfSense becomes unresponsive (because it is rebooting), other times it is already in the reboot process and I need to wait 1-2 minutes for it to come back.

Anyways, I will see what happens after removing the ping_check.sh script.