Delete alias. Currently in use by filter rule id 91

stephenw10

That's the actual rule number not the tracking ID, which is much longer.

You can see it in the running ruleset using: pfctl -vvsr | grep @91

Or you can see it in the Rules view in Diag > pfTop

Or you can open the config file and just search it for 'cancellare'

Unoptanio

@stephenw10 said in Delete alias. Currently in use by filter rule id 91:

pfctl -vvsr | grep @91

return:

@91 block drop in log on ! ovpns1 inet from 10.10.94.0/24 to any ridentifier 1000011970

There is not here:

stephenw10

It looks like it's on the assigned interface from ovpns1 not the group OpenVPN interface. Burt also there are no ports defined there so no ports alias.....

I'd check the config file directly.

Unoptanio

@stephenw10

stephenw10

I'd also try running Status > Filter Reload and make sure it's rebuilding the ruleset correctly.

Unoptanio

@stephenw10 said in Delete alias. Currently in use by filter rule id 91:

status > Filter Reload

done

The problem persists

stephenw10

Then look in the config directly. Or try running:
cat /cf/conf/config.xml | grep cancellare

Unoptanio

@stephenw10

stephenw10

OK there we go. What interface is opt9?

dennypage

@Unoptanio Look for opt9 in Status / Interfaces

Unoptanio

@dennypage

dennypage

@Unoptanio Okay, now you know. The rule is on the interface named "WAN_AMPERSAND". Look at Firewall / Rules / WAN_AMPERSAND and you should be able to find it.

stephenw10

It may be disabled? Though if it was I wouldn't expect to see it in Status > Interfaces

Unoptanio

@dennypage

yes is disabled

stephenw10

The enable it, remove the rule, then disable it again.

Unoptanio

@stephenw10

I'll try on Monday because now I'm connected remotely and I'm afraid of going to block.
I'll update you then, thanks

Unoptanio

@stephenw10 @dennypage
OK!

I did as you said. It worked well. After re-enabling the interface I managed to eliminate the "cancellare" alias that was in a rule of this interface, thanks