Xinetd error message repeating every 15 minutes - HELP



  • This is a clean fresh 2.3.1 install that was updated to Release p1 yesterday. This message repeats every 15 minutes under my General Logs entries.

    May 27 07:30:00 xinetd 26386 Reconfigured: new=0 old=1 dropped=0 (services)
    May 27 07:30:00 xinetd 26386 readjusting service 6969-udp
    May 27 07:30:00 xinetd 26386 Swapping defaults
    May 27 07:30:00 xinetd 26386 Starting reconfiguration
    May 27 07:15:00 xinetd 26386 Reconfigured: new=0 old=1 dropped=0 (services)
    May 27 07:15:00 xinetd 26386 readjusting service 6969-udp
    May 27 07:15:00 xinetd 26386 Swapping defaults
    May 27 07:15:00 xinetd 26386 Starting reconfiguration

    This did not happen until AFTER updating from 2.3.1 to 2.3.1 p1.

    I have no idea what this is or means or how to fix this.

    So far, I found a reference to this bug https://redmine.pfsense.org/issues/5948 but it says it's resolved.  :'(

    Haven't had time to check thoroughly but pfSense seems to be running just fine.

    Any thoughts?

    MORE INFO

    I only have 2 packages installed - CRON and NUT.

    I was wondering if this might be related to this CRON job. "0,15,30,45 * * * * root /etc/rc.filter_configure_sync"
    I tried deleting it but it returned after a reboot. I don't know what that is related to or what it does.
    Here is a full list of the other CRON jobs that I am not sure of.

    1 3 1 * * root /usr/bin/nice -n20 /etc/rc.update_bogons.sh
    */60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 sshlockout
    */60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 virusprot
    30 12 * * * root /usr/bin/nice -n20 /etc/rc.update_urltables
    */60 * * * * root /usr/bin/nice -n20 /usr/local/sbin/expiretable -v -t 3600 webConfiguratorlockout


  • Rebel Alliance Developer Netgate

    It is most likely from the filter sync. That message is from xinetd that is activating for one service on port 6969, which would be the TFTP proxy. Deselect all interfaces on System > Advanced, Firewall & NAT tab in the TFTP Proxy list, then save, and it should deactivate that service.



  • I'm seeing the same spam in my system log.  I tried the suggestion, but that didn't resolve it.  I didn't have any interfaces selected under the TFTP Proxy section when I checked.  Tried selecting all my interfaces, then saved it, then deselected them, then saved again.  But messages still appear every 15 min.

    Jun 10 21:00:00	xinetd	23343	Reconfigured: new=0 old=1 dropped=0 (services)
    Jun 10 21:00:00	xinetd	23343	readjusting service 6969-udp
    Jun 10 21:00:00	xinetd	23343	Swapping defaults
    Jun 10 21:00:00	xinetd	23343	Starting reconfiguration
    


  • It's indeed the TFTP proxy. Unchecking all the interfaces just prevents binding I guess, but does not stop the service. I think that it was cmb who confirmed on some thread that this was "sort of" a bug



  • @jimp:

    It is most likely from the filter sync. That message is from xinetd that is activating for one service on port 6969, which would be the TFTP proxy. Deselect all interfaces on System > Advanced, Firewall & NAT tab in the TFTP Proxy list, then save, and it should deactivate that service.

    I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.



  • @router_wang:

    I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.

    It's absolutely not disturbing traffic, it's nothing but log spam.

    Whatever is triggering the filter reload is the source of the "disturbing traffic", but it's probably that you're having ISP issues.



  • @cmb:

    @router_wang:

    I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.

    It's absolutely not disturbing traffic, it's nothing but log spam.

    Whatever is triggering the filter reload is the source of the "disturbing traffic", but it's probably that you're having ISP issues.

    Across internal networks.


  • Rebel Alliance Developer Netgate

    If you have a gateway showing as "down", and state killing on gateway failure enabled, then it would reset the states each time the filter reloads.

    So fix the down gateway, disable monitoring for it, or unset the state killing on gateway failure option.



  • I have this same issue as well since upgrading from 2.2.6 to 2.3.1 (and now 2.3.2).

    • Gateways are up

    • Happens whether monitoring is disabled or enabled.

    • Happens whether state killing on gateway failure is disabled or enabled



  • I'm in the same boat. Not using TFTP, but this reload happens often and resets my IPSEC tunnel as well…



  • Anyone else have a cron entry; 0,15,30,45;;;;;root;/etc/rc.filter_configure.sync ?  This appears to be causing it for me.  Can this cron entry be removed without causing other issues?  How often should the filter be resync'd?


  • Rebel Alliance Developer Netgate

    That cron entry would be from having scheduled rules (or at least having schedules defined). If you are not using scheduled rules, you can removed it. The filter will sync when config changes are applied or from automated events like gateway failures/recovery.



  • So if you need the filters to resync, how do you stop the log spam from occurring? I've followed all of the advice provided.


  • Rebel Alliance Developer Netgate

    At the moment, you don't. There isn't a way in xinetd to stop it from being so chatty.



  • What about stopping the underlying service that appears to be causing it to be chatty (i.e. the TFTP service)?



  • Although I also have no interfaces selected I find a service entry in /var/etc/xinetd.conf, see attached. So I rem'd it out.




  • Now I only get log entries "check_reload_status" "syncing firewall" every 15 minutes without readjusting service 6969-udp. I'll reduce the cron frequency as well.



  • Well that didn't last long. Some other file removed the #rem from xinetd.conf.  Jimp, can you say how the service gets entered into the file so TFTP proxy can be rem'd out permanently?


  • Rebel Alliance Developer Netgate

    FYI I just pushed a fix for this for all of the next release branches. If no interfaces are selected for TFTP proxy and reflection is not set to NAT+Proxy, the daemon will not attempt to run.


  • Rebel Alliance Global Moderator

    Yeah ;)  Thanks JimP


  • Banned

    @jimp:

    FYI I just pushed a fix for this for all of the next release branches. If no interfaces are selected for TFTP proxy and reflection is not set to NAT+Proxy, the daemon will not attempt to run.



  • Will this fix be in the 2.4 release?


  • Rebel Alliance Developer Netgate

    2.4, 2.3.3, and 2.3.2_2, it's in all the branches. Whichever one we put out next will have it.



  • Hi

    2.3.2-RELEASE-p1 (amd64)

    I've just noticed I'm getting this as well.
    No Interfaces selected in 'TFTP Proxy'.

    Is there anything I can do manually until the next release is available ?

    Thanks


  • Banned

    Yeah, you can manually upgrade to 2.3.3-rc.



  • Any idea when 2.3.2.2 will come out?


  • Rebel Alliance Developer Netgate

    There won't be a 2.3.2_2, 2.3.3 is coming out shortly. Probably early next week, release images are building now and then we have to beat it up with testing for a couple days.



  • @kesawi:

    I have this same issue as well since upgrading from 2.2.6 to 2.3.1 (and now 2.3.2).

    • Gateways are up

    • Happens whether monitoring is disabled or enabled.

    • Happens whether state killing on gateway failure is disabled or enabled

    I have the same issue as above although i use the most recently stable version. I'm a newcomer of pfsense. I have to say the help docs are not good. For example, I cant even find a sample or demo to help  set up flow control of my network which is so easy in other cheap routers.  Pfsense is professional but not user friend. Who can show me how to set a rule to block MACs or bind MACs to a fixed IP?