php-fpm errors

killroy

I'm running 2.4.4-RELEASE-p2 and I'm getting errors

Mar 25 03:36:29 php-fpm 37638 /rc.filter_configure_sync: New alert found: There were error(s) loading the rules: /tmp/rules.debug:175: syntax error - The line in question reads [175]: pass out quick on { em0 } inet proto tcp from any to <negate_networks> tracker 10000001 flags S/SA keep state dnqueue( 1,) label "NEGATE_ROUTE: Negate policy routing for destination"

What does it mean?

stephenw10

Hmm, it canot load the ruleset, or repload it to apply chamges you made, because there is an error. On line 175 in this case.

Is that a ruleset that has been upgraded from a much older version?

dnqueue there looks wrong, I expect to see dnpipe (for Limiters) or queue (for AltQ shaping).

The easiest way past that might just be to disable the negate rules. You can do that in Sys > Adv > Firewall & NAT. That should remove that line entirely and allow the ruleset to load.
Be aware that without rules traffic will be forced to use a gateway if one is set via policy routing. That's usually expected anyway though.

Steve

killroy

@stephenw10

I had created limiter rules some time ago. last week I changed internet provider and I changed the upload/download speeds. I guess that was what is the problem, You can't changed the speeds, make modifications if active? I delete floating rule and limiters, recreated them. I'll see if that fixes the problem.

stephenw10

If you edited the Limiters you may need to re-apply them in the rules.

Unless you created that rule specifically there is not normally a way to edit the Negate Networks rule. I would still try disabling it as I said and then reload the rules in Status > Filter Reload and see if it comes back without errors.

Steve