php-fpm errors



  • I'm running 2.4.4-RELEASE-p2 and I'm getting errors

    Mar 25 03:36:29 php-fpm 37638 /rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:175: syntax error - The line in question reads [175]: pass out quick on { em0 } inet proto tcp from any to <negate_networks> tracker 10000001 flags S/SA keep state dnqueue( 1,) label "NEGATE_ROUTE: Negate policy routing for destination"

    What does it mean?


  • Netgate Administrator

    Hmm, it canot load the ruleset, or repload it to apply chamges you made, because there is an error. On line 175 in this case.

    Is that a ruleset that has been upgraded from a much older version?

    dnqueue there looks wrong, I expect to see dnpipe (for Limiters) or queue (for AltQ shaping).

    The easiest way past that might just be to disable the negate rules. You can do that in Sys > Adv > Firewall & NAT. That should remove that line entirely and allow the ruleset to load.
    Be aware that without rules traffic will be forced to use a gateway if one is set via policy routing. That's usually expected anyway though.

    Steve



  • @stephenw10

    I had created limiter rules some time ago. last week I changed internet provider and I changed the upload/download speeds. I guess that was what is the problem, You can't changed the speeds, make modifications if active? I delete floating rule and limiters, recreated them. I'll see if that fixes the problem.


  • Netgate Administrator

    If you edited the Limiters you may need to re-apply them in the rules.

    Unless you created that rule specifically there is not normally a way to edit the Negate Networks rule. I would still try disabling it as I said and then reload the rules in Status > Filter Reload and see if it comes back without errors.

    Steve


Log in to reply