Error loading rules

[johnabbot]

Anyone else see this?

There were error(s) loading the rules: /tmp/rules.debug:230: macro 'pfB_Africa_v4' not defined - The line in question reads [230]: block log quick on { pppoe0 } inet from $pfB_Africa_v4 to any tracker 1770009617 label "USER_RULE: pfB_Africa_v4 auto rule" @ 2016-08-25 15:17:02

J

[RonpfS]

What version of pfBlockerNG are you using ?

[johnabbot]

2.1.1_4 with TLD enabled

[RonpfS]

@johnabbot:

2.1.1_4 with TLD enabled

And what does pfblockerng.log extras.log , Status System Logs, Resolver Logs shows? Any crash report in Dashboard?

Did you raise the Firewall Maximum Table Entries?

Go to Firewall / pfBlockerNG / Africa tab and see if your selection are still fine. Hit Save, then do a Force Reload IP. Check the logs after.

[johnabbot]

@RonpfS:

@johnabbot:

2.1.1_4 with TLD enabled

And what does pfblockerng.log extras.log , Status System Logs, Resolver Logs shows?

Mothing in any of these logs.

Any crash report in Dashboard?

The one I posted

Did you raise the Firewall Maximum Table Entries?

No

Go to Firewall / pfBlockerNG / Africa tab and see if your selection are still fine. Hit Save, then do a Force Reload IP. Check the logs after.

Force Reload IP gives this

[ DNSBL FAIL ] [ Skipping : GJTech ]

[1472209734] unbound-checkconf[85421:0] error: error parsing local-data at 30 '}).filter(' 60 IN A 10.10.10.1': Syntax error, could not parse the RR's TTL
[1472209734] unbound-checkconf[85421:0] error: Bad local-data RR }).filter(' 60 IN A 10.10.10.1
[1472209734] unbound-checkconf[85421:0] fatal error: failed local-zone, local-data configuration

I don't see anything in the logs

[RonpfS]

@johnabbot:

The one I posted

That's not a crash report, probably a failure to load the table.

@johnabbot:

Did you raise the Firewall Maximum Table Entries?

No

It is mentionned many many times that if you are using GeoIP tables, you need to raise Firewall Maximum Table Entries in System / Advanced / Firewall & NAT

@johnabbot:

Go to Firewall / pfBlockerNG / Africa tab and see if your selection are still fine. Hit Save, then do a Force Reload IP. Check the logs after.

Force Reload IP gives this

[ DNSBL FAIL ] [ Skipping : GJTech ]

[1472209734] unbound-checkconf[85421:0] error: error parsing local-data at 30 '}).filter(' 60 IN A 10.10.10.1': Syntax error, could not parse the RR's TTL
[1472209734] unbound-checkconf[85421:0] error: Bad local-data RR }).filter(' 60 IN A 10.10.10.1
[1472209734] unbound-checkconf[85421:0] fatal error: failed local-zone, local-data configuration

I don't see anything in the logs

@RonpfS:

The http://adblock.gjtech.net/?format=unix-hosts doesn't seem to be available anymore.
Just turn the list state to OFF.

When a list fails to load, use the URL and load it in the browser. That URL is now just a standard Web page, the same as http://adblock.gjtech.net, so something changed at that site. Fetching a Web page to pfBlockerNG will certain cause failure.

It is good practice to monitor the pfblockerng.log on a regular basis to see what is happening. That list has been broken since 08/13/16.