Error loading rules

  • Hi there
    I have encountered an error while loading my pfsense webinterface that says the following:

    There were error(s) loading the rules: /tmp/rules.debug:20: cannot define table bogonsv6: Cannot allocate memory - The line in question reads [20]: table <bogonsv6> persist file "/etc/bogonsv6"

    I tried to fix the problem using these links:

    I have set Firewall Maximum Table Entries from 400000 to 800000 and yet I still get the error messages when restarting my pfsense router.

    Any advice or comment about fixing this issue will be appreciated.

  • LAYER 8 Netgate

    400000 is enough. 800000 is double enough.

    Something else is going on.

    How much RAM in the unit?

    Running anything like pfBlockerNG or anything else that likes to create massive tables?

    What does this output in Diagnostics > Command prompt?

    pfctl -sm

    And this:

    wc -l /etc/bogonsv6

    and this:

    ls -l /etc/bogonsv6

    and this:

    for table in `pfctl -sT`; do echo -n $table; pfctl -T show -t $table | wc -l ; done

  • Here are the details:

    This is a screenshot of my system interface at the moment.

    Yes, I run pfBlockerNG. I also run squid and Snort.

    Here are the results after executing the following commands:

    • pfctl -sm
      states hard limit 20000
      src-nodes hard limit 20000
      frags hard limit 5000
      table-entries hard limit 800000

    • wc -l /etc/bogonsv6
      107666 /etc/bogonsv6

    • ls -l /etc/bogonsv6
      -rw-r--r-- 1 root wheel 1733644 Apr 16 10:30 /etc/bogonsv6

    • for table in pfctl -sT; do echo -n $table; pfctl -T show -t $table | wc -l ; done
      bogons 3040
      bogonsv6 107665
      snort2c 0
      sshguard 0
      tonatsubnets 5
      virusprot 0
      webConfiguratorlockout 0

  • LAYER 8 Netgate

    That all looks fine. You should not be receiving any errors.

    I question that your swap is almost half full though.

    209MB RAM? That's practically nothing. I give the smallest of my test VMs 512MB. That is likely your problem.

Log in to reply