Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Xinetd error message repeating every 15 minutes - HELP

    Scheduled Pinned Locked Moved General pfSense Questions
    28 Posts 14 Posters 12.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      georgeman
      last edited by

      It's indeed the TFTP proxy. Unchecking all the interfaces just prevents binding I guess, but does not stop the service. I think that it was cmb who confirmed on some thread that this was "sort of" a bug

      If it ain't broke, you haven't tampered enough with it

      1 Reply Last reply Reply Quote 0
      • R
        router_wang
        last edited by

        @jimp:

        It is most likely from the filter sync. That message is from xinetd that is activating for one service on port 6969, which would be the TFTP proxy. Deselect all interfaces on System > Advanced, Firewall & NAT tab in the TFTP Proxy list, then save, and it should deactivate that service.

        I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.

        1 Reply Last reply Reply Quote 0
        • C
          cmb
          last edited by

          @router_wang:

          I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.

          It's absolutely not disturbing traffic, it's nothing but log spam.

          Whatever is triggering the filter reload is the source of the "disturbing traffic", but it's probably that you're having ISP issues.

          1 Reply Last reply Reply Quote 0
          • R
            router_wang
            last edited by

            @cmb:

            @router_wang:

            I'm not using TFTP proxy and this is happening quite frequently and disturbing traffic when it happens.

            It's absolutely not disturbing traffic, it's nothing but log spam.

            Whatever is triggering the filter reload is the source of the "disturbing traffic", but it's probably that you're having ISP issues.

            Across internal networks.

            1 Reply Last reply Reply Quote 0
            • jimpJ
              jimp Rebel Alliance Developer Netgate
              last edited by

              If you have a gateway showing as "down", and state killing on gateway failure enabled, then it would reset the states each time the filter reloads.

              So fix the down gateway, disable monitoring for it, or unset the state killing on gateway failure option.

              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

              Need help fast? Netgate Global Support!

              Do not Chat/PM for help!

              1 Reply Last reply Reply Quote 0
              • kesawiK
                kesawi
                last edited by

                I have this same issue as well since upgrading from 2.2.6 to 2.3.1 (and now 2.3.2).

                • Gateways are up

                • Happens whether monitoring is disabled or enabled.

                • Happens whether state killing on gateway failure is disabled or enabled

                1 Reply Last reply Reply Quote 0
                • T
                  t00th
                  last edited by

                  I'm in the same boat. Not using TFTP, but this reload happens often and resets my IPSEC tunnel as well…

                  1 Reply Last reply Reply Quote 0
                  • M
                    markn62
                    last edited by

                    Anyone else have a cron entry; 0,15,30,45;;;;;root;/etc/rc.filter_configure.sync ?  This appears to be causing it for me.  Can this cron entry be removed without causing other issues?  How often should the filter be resync'd?

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      That cron entry would be from having scheduled rules (or at least having schedules defined). If you are not using scheduled rules, you can removed it. The filter will sync when config changes are applied or from automated events like gateway failures/recovery.

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • kesawiK
                        kesawi
                        last edited by

                        So if you need the filters to resync, how do you stop the log spam from occurring? I've followed all of the advice provided.

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          At the moment, you don't. There isn't a way in xinetd to stop it from being so chatty.

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • kesawiK
                            kesawi
                            last edited by

                            What about stopping the underlying service that appears to be causing it to be chatty (i.e. the TFTP service)?

                            1 Reply Last reply Reply Quote 0
                            • M
                              markn62
                              last edited by

                              Although I also have no interfaces selected I find a service entry in /var/etc/xinetd.conf, see attached. So I rem'd it out.

                              image.png
                              image.png_thumb

                              1 Reply Last reply Reply Quote 0
                              • M
                                markn62
                                last edited by

                                Now I only get log entries "check_reload_status" "syncing firewall" every 15 minutes without readjusting service 6969-udp. I'll reduce the cron frequency as well.

                                1 Reply Last reply Reply Quote 0
                                • M
                                  markn62
                                  last edited by

                                  Well that didn't last long. Some other file removed the #rem from xinetd.conf.  Jimp, can you say how the service gets entered into the file so TFTP proxy can be rem'd out permanently?

                                  1 Reply Last reply Reply Quote 0
                                  • jimpJ
                                    jimp Rebel Alliance Developer Netgate
                                    last edited by

                                    FYI I just pushed a fix for this for all of the next release branches. If no interfaces are selected for TFTP proxy and reflection is not set to NAT+Proxy, the daemon will not attempt to run.

                                    Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                    Need help fast? Netgate Global Support!

                                    Do not Chat/PM for help!

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      Yeah ;)  Thanks JimP

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • D
                                        doktornotor Banned
                                        last edited by

                                        @jimp:

                                        FYI I just pushed a fix for this for all of the next release branches. If no interfaces are selected for TFTP proxy and reflection is not set to NAT+Proxy, the daemon will not attempt to run.

                                        1 Reply Last reply Reply Quote 0
                                        • R
                                          rebytr
                                          last edited by

                                          Will this fix be in the 2.4 release?

                                          1 Reply Last reply Reply Quote 0
                                          • jimpJ
                                            jimp Rebel Alliance Developer Netgate
                                            last edited by

                                            2.4, 2.3.3, and 2.3.2_2, it's in all the branches. Whichever one we put out next will have it.

                                            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                                            Need help fast? Netgate Global Support!

                                            Do not Chat/PM for help!

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.