SG4860 alert message "Cannot allocate memory"

SenseiNYC

The error reads:

There were error(s) loading the rules: /tmp/rules.debug:22: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [22]: table <bogonsv6> persist file "/etc/bogonsv6"

Is there an easy fix for this?

Thanks.

chrismacmahon

what version are you running?

SenseiNYC

2.4.3

chrismacmahon

I would update to the latest, 2.4.4-p2, but you can set a manual limit like in this thread: https://forum.netgate.com/topic/129047/see-here-for-this-error-cannot-define-table-bogonsv6-cannot-allocate-memory/

SenseiNYC

right i read the thread, where do i set the limit? also if i am not using ipv6 couldn't i disable v6 bogons?

chrismacmahon

I would not disable bogons of any sort.

If you navigate to System -> Advanced -> Firewall & NAT tab, you should see a section called Firewall Maximum Table Entries, feel free to bump that up.

My SG-4860 is at 4000000.

SenseiNYC

the default value for max tables entries is 400k so that didn't work well. Is there a rule of thumb about how much memory let's say 1k tables will consume?

johnpoz

Did you update?

Im am running sg4860, and yes the default is 400k for the table size. Not having any issues.

You have 2 options to be currently support
2.4.4p1 previous release, or current 2.4.4p2

If you are on 2.4.3 your not currently supported version..

SenseiNYC

Actually it was 2.4.4-p2 already I was wrong. Problem is that I was forced to run 80 miles over to the site because the manager decided to manually reboot. The SG4860 never came back up. It was available via SSH, HTTP never came back. So sadly I had to factory reset and start all over without having the benefit of troubleshooting the problem.

johnpoz

so your good now - your not having bogon problem?

SenseiNYC

lol exactly.

SenseiNYC

maybe it has something to do with me loading over 200k rows for blocking port 25 from the WAN via Alias (ip table) as well as having lite squid installed as well as pfblocker? bah who knows. i would like to be able to use me own IP blocks which i created from various sources. i dont think i'll want to load all 330k rows but i would like to be able to use my sources.

Derelict

Yeah if you are loading another 200K rows you might have to increase that value.

It is in System > Advanced, Firewall & NAT, Firewall Maximum Table Entries

400K is enough by default. With your extra 200K I'd try 600K