new user and not sure about these log entries?

bainsley

Hi I'm a new user running a SG-1100 Iwant to be absolutely certain about the following log entries. I have no VPN set up as of yet. Had tested a setup and config with a VPN at one time but have since done a factory reset so this box hasn't connected to the internet again since. It's a standalone firewall with a few vlans on opt. The lines I'm seeing and would like to know if are of concern or are just standard log entries are:

php 414 rc.bootup. Creating rrd update script
php 414 rc.bootup The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was strongswan not running? (check /var/run/daemon-charon.pid)
php 414 rc.bootup. Reysncing OpenVPN instances
check_reload_status 400 Reloading filter
check_reload_status 400 Syncing firewall

What is the firewall syncing with? the kernel? BSD? Which filter? The rules?
Any help appreciated. Thanks.

Gertjan

@bainsley said in new user and not sure about these log entries?:

What is the firewall syncing with? the kernel? BSD? Which filter? The rules?

The kernel includes capabilities what I would call a "IP stack". And it can act as a firewall.
Both are needed so the FreeeBSD kernel can do it's firewall thing, and that's what pfSense is all about.

Firewall rules are dynamically reloaded after many possible sirconstances, like processses restarting, alaiase changed, or some user GUI intercation. many others exist.

So you will see this :

@bainsley said in new user and not sure about these log entries?:

check_reload_status 400 Reloading filter
check_reload_status 400 Syncing firewall

a lot.

If you are not using IPSEC, this :

@bainsley said in new user and not sure about these log entries?:

php 414 rc.bootup The command '/usr/local/sbin/strongswanrc stop' returned exit code '1', the output was strongswan not running? (check /var/run/daemon-charon.pid)

is just a message that pfSense stopped IPSEC - and it was already stopped.

@bainsley said in new user and not sure about these log entries?:

php 414 rc.bootup. Creating rrd update script

This happens when pfSense finds a 'new' interface or object to make graphs for.
The graph data is stored in a so called rrd file.
A scripts that runs every xx seconds, populates the rrd file with data .
So you can have, after a while :