Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Alias error

    Scheduled Pinned Locked Moved Firewalling
    26 Posts 7 Posters 1.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      cjohnson @patient0
      last edited by cjohnson

      @patient0 said in Alias error:

      I assume you don't add the quotes to the IP, yes?

      Correct.
      Firewall > Aliases > (IP tab is selected) Click the "Add" button.
      Populate the "Name" Field with this exactly --> TestALIAS
      Populate the "Description" Field with this exactly --> testDESCRIPTION
      Change the "Type" drop-down to this exactly --> Host(s)
      Within the row labelled "IP or FQDN", populate the 1st box with this exactly --> 10.200.0.210
      (The 1st box contains exactly twelve characters, I've ensure there are no leading, or trailing spaces)
      Within the row labelled "IP or FQDN", populate the 2nd box with this exactly --> testHOSTIPdesc

      screenshot.png

      Final Step: Click the "Save" button.
      Then I see this.......

      screenshot1.png

      I've also tried this using "Bulk Import Network Aliases" per the Netgate Docs site.
      Going that route creates the Alias for me however, with zero IPs contained within it.

      😠 🤷

      patient0P 1 Reply Last reply Reply Quote 0
      • patient0P
        patient0 @cjohnson
        last edited by

        @cjohnson mmmh, looks all correct indeed. Have you tried a different browser? Or a private window in your browser. Maybe some extension is blocking something and your input is lost when you press 'Save'.

        C 1 Reply Last reply Reply Quote 0
        • C
          cjohnson @patient0
          last edited by

          @patient0

          Yes. I've tried different browsers and private tabs. I've also ensured that I have no extensions enabled.

          Is there someway to do this through the CLI somehow?

          johnpozJ 1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @cjohnson
            last edited by

            @cjohnson not sure what your wanting to accomplish but in your second shot I don't see an IP..

            As mentioned is something removing that when you go to click save?

            I have no issue creating such an alias.

            testalias.jpg

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            C 1 Reply Last reply Reply Quote 0
            • C
              cjohnson @johnpoz
              last edited by cjohnson

              @johnpoz said in Alias error:

              not sure what your wanting to accomplish but in your second shot I don't see an IP..

              I'm merely attempting to add an alias.
              What you've pointed out there is exactly the problem I'm chasing.

              The only action taken in between the point in time where I populated the fields as shown within the 1st screenshot, and the point in time where I grabbed the second screenshot was....

              So, timeline-wise...
              ---All fields populated with "TestALIAS" and IPs etc...then.....

              "Final Step: Click the "Save" button.
              Then I see this......."
              

              ---Second Screenshot Taken--

              In short.... I fill all of the fields correctly and hit "Save".
              Somehow, someway; for whatever the reason... something happens in between those two actions wherein my form data doesn't make it's way to the pfSense box, or the form data doesn't get parsed correctly...or...maybe getting munged in transit.....something like that. I don't know.

              At this point I'm not sure what to do next to figure out where things are breaking down.

              ahking19A johnpozJ 2 Replies Last reply Reply Quote 0
              • ahking19A
                ahking19 @cjohnson
                last edited by

                @cjohnson as a workaround do you have any previous existing aliases that you can use the "copy alias" action and then go back in and edit?

                C 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @cjohnson
                  last edited by

                  @cjohnson sounds like a browser issue to me. have you tried different browser

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • C
                    cjohnson @ahking19
                    last edited by

                    @ahking19

                    No. Unfortunately not on this server, no.
                    This is the first and only one on this box.

                    I had considered some other hackery like possibly using a totally different box to see what alterations end up in the config.xml and/or adding them manually and loading them into another box etc etc........

                    @johnpoz
                    yes. that was something else that I've tried as well.
                    see my reply just prior to you first entry into this thread that was directed towards patient0...

                    Yes. I've tried different browsers and private tabs. I've also ensured that I have no extensions enabled.
                    
                    patient0P 1 Reply Last reply Reply Quote 0
                    • patient0P
                      patient0 @cjohnson
                      last edited by patient0

                      @cjohnson Can you create any other type of aliases? If yes, I'd try create one of another type, save it, edit and change to type host.

                      Or if you got another pfSense instance create it/them there, export them (via Backup&Diag) and import only the aliases (Restore > Aliases).
                      Important to note is that the aliases import replaces all existing alias with the once in the file. It does not merge with existing aliases!

                      If you feel adventures (is it a PROD system?) and know vi you can edit the config XML directly using viconfig (see doc here) on the command line. This uses the vi editor to edit the config in-place.

                      The structure is:

                      <aliases>
                      	<alias>
                      		<name>testALIAS</name>
                      		<type>host</type>
                      		<address>10.200.0.210</address>
                      		<descr><![CDATA[testDESCRIPTION]]></descr>
                      		<detail><![CDATA[testHOSTIPdescription]]></detail>
                      	</alias>
                      </aliases>
                      

                      Beside: Is there something else out of the ordinary how you access the pfSense GUI? Via WAN, via a proxy, web caching server, ssh tunnel, VPN? What OS and language?

                      C 1 Reply Last reply Reply Quote 0
                      • C
                        cjohnson @patient0
                        last edited by cjohnson

                        @patient0

                        attempts to add a single port alias containing a single port definition fails with...

                        The following input errors were detected:
                        
                        <bulletpointHERE>    is not a valid port or alias.
                        

                        URL type aliases behave the same way.

                        yes, this is a prod box. i have two others that are not though.
                        i'm going to reserve the vi route for a last resort. i'm about to try the create/export/import thing you've mentioned now.

                        as far as the "out of the ordinary" item.... no. i'm trying this directly from a PC attached through a switch to one of the internal facing NICs.
                        OS is (among others i've tried including windows 11) Mint 21.3 with english, US.

                        C 1 Reply Last reply Reply Quote 0
                        • C
                          cjohnson @cjohnson
                          last edited by cjohnson

                          OK.This is strange.

                          I can sucessfully use the "Import" button (which takes me to the "Bulk Import" page) on the main "Aliases" page to then create the alias with a range of IPs (using the "Aliases to Import" box on the subsequent page) how I want them.

                          If I attempt to import an exported alias XML from another box where I've created the alias how I attempted to do so to begin with, it doesn't quite work correctly.

                          1.png

                          If I then attempt to edit what I have there....

                          2.png

                          Any attempts to populate one or more of the address boxes (left column) there then save it, I get a similar looking "is not a valid host address" error as before. There's a very slight difference this time though. If i populate all three of those "testX" rows that you see in that screenshot, then try to save it... the error shows like this

                          3.png

                          So, there's for sure something jacked up with the parsing of the data once it gets into the box.
                          This rules out the "is my data getting munged before it even gets to the box" question.

                          A 1 Reply Last reply Reply Quote 0
                          • A
                            Anry @cjohnson
                            last edited by

                            Hello.
                            After updating the system to version 2.8.0-RELEASE (amd64)
                            built on Thu May 22 2:12:00 EEST 2025
                            FreeBSD 15.0-CURRENT
                            a similar problem arose.
                            Are there any solutions?

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @Anry
                              last edited by johnpoz

                              @Anry yeah use an actual valid FQDN or IP.. Like it says right there in the HINT in your screenshot.

                              test1 is not a fqdn, something like test1.home.arpa or test.domain.tld would be a fqdn - this fqdn has to be resolvable by pfsense.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              A 1 Reply Last reply Reply Quote 0
                              • A
                                Anry @johnpoz
                                last edited by

                                When trying to create a new alias

                                191bae4d-2656-4879-8daa-aa137eded74b-изображение.png

                                I receive this message

                                06486e52-abeb-4c71-b629-e24ac3643f03-изображение.png

                                The list of aliases now looks like this:

                                943f2dc2-2f46-4fb3-a21c-eed29df812de-изображение.png

                                The contents of aliases are not displayed.
                                But they should be.
                                When editing an existing alias, list items are not displayed

                                cb575d9c-7f50-4e70-a47a-5712990ae298-изображение.png

                                There is such an alias with a list of hosts in the configuration

                                6d834b82-7ca8-4905-bfb0-f11e04e8757b-изображение.png

                                patient0P 1 Reply Last reply Reply Quote 0
                                • A
                                  Anry
                                  last edited by

                                  Hello.
                                  Are there any recommendations on how to solve the problem that has arisen or do I need to reinstall the system and restore the configuration?

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @Anry
                                    last edited by

                                    @Anry

                                    What does the errors here say?

                                    error.jpg

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    A 1 Reply Last reply Reply Quote 0
                                    • A
                                      Anry @johnpoz
                                      last edited by

                                      @johnpoz

                                      I am attaching a screenshot.

                                      667bd66c-7687-4228-937d-6742138acbd8-изображение.png

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @Anry
                                        last edited by

                                        @Anry well I would prob fix that - you have never renewed your gui cert? But that has nothing to do with the problem.

                                        I am unable to duplicate your problem - but a complete reinstall seems like a sledge hammer to kill a fly.

                                        I would export your aliases xml.. just so you have a copy of what you had.

                                        Then delete them all.. And try from a clean slate for aliases.. Making sure after you delete them all that your export of xml is clean.

                                        I even fired up my copy of 2.8 - and aliases working fine.

                                        alias.jpg

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        GertjanG 1 Reply Last reply Reply Quote 0
                                        • GertjanG
                                          Gertjan @johnpoz
                                          last edited by Gertjan

                                          @johnpoz
                                          527cdb77-d025-48be-a126-397ec0403fda-image.png

                                          are two individual IPs.

                                          This looks like a IP "range" :

                                          fb829e24-a00e-4639-9c02-18ec5a4556b5-image.png

                                          From 10.100.6.4 to 10.100.66.24.

                                          Rapid solution :
                                          Enter them individually ( 😊 )

                                          No "help me" PM's please. Use the forum, the community will thank you.
                                          Edit : and where are the logs ??

                                          johnpozJ S 2 Replies Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @Gertjan
                                            last edited by

                                            @Gertjan you wouldn't do a range like that, range would be like this.

                                            range.jpg

                                            Then it would create the individual entries on its own. Not sure what the issue is, but I am unable to duplicate it..

                                            The only thing comes to mind is space in there? But I tried that putting a space in front and after the IP and still works fine.

                                            My guess would be browser doing something with it it shouldn't be - but he says he tried different browsers.

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.