• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

There were error(s) loading the rules: /tmp/rules.debug:51: cannot define table pfB_NAmerica_v6: Cannot allocate memory

Scheduled Pinned Locked Moved pfBlockerNG
11 Posts 4 Posters 1.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    SipriusPT
    last edited by Aug 11, 2021, 10:19 AM

    Hello everyone,

    Without any change on configuration, I've start receiving errors related with one pfBlocker rule related with North America IPv6, its not constant but sometime I got several in one hour:

    there were error(s) loading the rules: /tmp/rules.debug:51: cannot define table pfB_NAmerica_v6: Cannot allocate memory - The line in question reads [51]: table <pfB_NAmerica_v6> persist file "/var/db/aliastables/pfB_NAmerica_v6.txt"

    I am not using this rule in firewall.

    I dont have tried to remove pfBlocker and reinstall it again, I am still in that phase of trying to solve only this issue before messing around with all pfBlocker.

    Any of you have had such errors before?

    Thanks in advance!

    1xSG-4860-1U
    1xSG-3100
    2xpfSense Virtual Machines

    S G 2 Replies Last reply Aug 11, 2021, 10:32 AM Reply Quote 0
    • S
      SipriusPT @SipriusPT
      last edited by SipriusPT Aug 11, 2021, 10:32 AM Aug 11, 2021, 10:32 AM

      UPDATE: after a quick search I went into Firewall Maximum Table Entries option that needs to be changed to a higher value. Since it needs to restart the entire firewall, I will leave feedback then.

      1xSG-4860-1U
      1xSG-3100
      2xpfSense Virtual Machines

      J 1 Reply Last reply Aug 11, 2021, 10:37 AM Reply Quote 0
      • J
        johnpoz LAYER 8 Global Moderator @SipriusPT
        last edited by Aug 11, 2021, 10:37 AM

        @sipriuspt said in There were error(s) loading the rules: /tmp/rules.debug:51: cannot define table pfB_NAmerica_v6: Cannot allocate memory:

        Since it needs to restart the entire firewal

        Huh.. I do not believe changing that requires a reboot..

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        D 1 Reply Last reply Aug 11, 2021, 1:14 PM Reply Quote 0
        • G
          Gertjan @SipriusPT
          last edited by Aug 11, 2021, 12:10 PM

          @sipriuspt said in There were error(s) loading the rules: /tmp/rules.debug:51: cannot define table pfB_NAmerica_v6: Cannot allocate memory:

          I am not using this rule in firewall.

          You mean, the rule that includes the table (alias) called "pfB_NAmerica_v6" ?
          Not a real solution, but what about removing that pfB feed ?

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          1 Reply Last reply Reply Quote 0
          • D
            dotdash @johnpoz
            last edited by Aug 11, 2021, 1:14 PM

            @johnpoz said in [There were error(s) loading the rules:

            Huh.. I do not believe changing that requires a reboot..

            Yup. Not sure when it changed, but now it requires a reboot.

            J 1 Reply Last reply Aug 11, 2021, 1:16 PM Reply Quote 0
            • J
              johnpoz LAYER 8 Global Moderator @dotdash
              last edited by johnpoz Aug 11, 2021, 1:18 PM Aug 11, 2021, 1:16 PM

              I edited mine and said applied - made no mention of having to reboot.. But then again not having the issue, mine was set to be very large long time ago when this issue first appeared.

              Not sure why that would need a reboot.. Guess could try to duplicate it by lowering it until such point as I get the error on reload of rules...

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              D 1 Reply Last reply Aug 11, 2021, 1:21 PM Reply Quote 0
              • D
                dotdash @johnpoz
                last edited by Aug 11, 2021, 1:21 PM

                @johnpoz
                Strange. Every time I've tried increasing it lately, it has required a reboot. The only time I see this error is on systems with pfBlocker, so there could be something with pfBlocker happening that makes it require a reboot.

                J 1 Reply Last reply Aug 11, 2021, 1:23 PM Reply Quote 0
                • J
                  johnpoz LAYER 8 Global Moderator @dotdash
                  last edited by Aug 11, 2021, 1:23 PM

                  Did you just reload the rules? You can reload the rules without having to reboot.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  D 1 Reply Last reply Aug 11, 2021, 1:33 PM Reply Quote 0
                  • D
                    dotdash @johnpoz
                    last edited by Aug 11, 2021, 1:33 PM

                    @johnpoz
                    You can remove some lists, like in the OPs example the v6 rules, which are huge and useless (cue a certain ipv6 evangelist to yell at me for that comment) and possibly lower the tables enough to reload cleanly, but every time I've tried to increase maximum tables lately, it prompts for a reboot. This is probably pfBlocker related.

                    J 1 Reply Last reply Aug 11, 2021, 3:22 PM Reply Quote 0
                    • J
                      johnpoz LAYER 8 Global Moderator @dotdash
                      last edited by Aug 11, 2021, 3:22 PM

                      I have pfblocker and does not "prompt" for reboot..

                      I get applied successfully - that is it.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      S 1 Reply Last reply Aug 11, 2021, 3:37 PM Reply Quote 0
                      • S
                        SipriusPT @johnpoz
                        last edited by Aug 11, 2021, 3:37 PM

                        Well, I dont advise (at least in a SG-3100 with pfsense 2.4.5-p1) to change that value!

                        After changing Firewall Maximum Table Entries from default value of 2000000 to 2500000, it showed one popup to reboot to apply changes, and I choose to reboot.

                        Doing this, all services running in this unit, didnt start (not even one), so I checked that Firewall Maximum Table Entries again, and notice that the default value detected was 0, but there was 2500000 in the field above:

                        b3984ce4-f571-4e79-8d3a-149b484e9d88-image.png

                        So I tried to change that value to lower values like 2300000, 2100000 and then 2000000 (doing all asked reboots between changes), but still nothing, so I notice that this unit was not rebooting at all.

                        To recover, I went in "Backup and restore" and restored last stable config, and tried to halt system, but nothing again. So I power it off, and power on again, and it came back again with that last stable config.

                        Not sure how it was before with other firmware versions, but with 2.4.5-p1 ... dont recommend at all to mess around with it.

                        Also this is all I have running in this unit:

                        d109a327-3456-478f-9021-6a6b47d70af8-image.png

                        1xSG-4860-1U
                        1xSG-3100
                        2xpfSense Virtual Machines

                        1 Reply Last reply Reply Quote 0
                        11 out of 11
                        • First post
                          11/11
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                          This community forum collects and processes your personal information.
                          consent.not_received