[zone: pf states] PF states limit reached
-
Hello! I ask you to help me. A few days ago there was a problem, it repeats every day at about the same time. I made a screenshot of the monitoring, what to do next, there is not enough knowledge. I ask you to help me.
-
The message says that your pfsense State-Limit has been reached. You can increase the limit under
System > Advanced > Firewall & NAT
Firewall Maximum StatesThis will mitigate the problem that the limit is reached. But i suspect that this might not be enough.
Moreover you should check what causes theses high states (e.g. misconfiguration, scan to somewhere, cron-job). As it is about the same time you should dump either state-table using
pfctl -ss > filename
and analyse. If that does not reveal it use tcpdump to see what is happening. -
@fwcheck said in [zone: pf states] PF states limit reached:
Moreover you should check what causes theses high states
Exactly - if happens around the same time everyday.. Do you have some sort of scan taking off? That seems like a high amount of destination addresses..
Sure likes a scan of some sort to me.. You have a really low number of source IPs.. So I take it not a lot of clients?
Where are all the states too? or from?
