• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

7100 with static null4 route

Scheduled Pinned Locked Moved Official Netgate® Hardware
4 Posts 3 Posters 265 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • L
    liug2
    last edited by liug2 Aug 5, 2024, 8:53 PM Aug 5, 2024, 8:45 PM

    I upgraded my 7100 to latest 24.03-RELEASE. I noticed my static blackhole null4 route no longer works, and I can see the traffic leaks to WAN.

    In System -> Routing -> Static Routes, I have one blackhole routes to 192.168.0.0/19 using null4.

    In /var/log/system.log, I can see below errors:

    Aug  5 20:36:39 my-7100 php-fpm[53864]: /rc.newipsecdns: The command '/sbin/route -n6 get 'default' 2>/dev/null | /usr/bin/egrep 'flags: <.*PROTO.*>'' returned exit code '1', the output was ''
    Aug  5 20:36:39 my-7100 php-fpm[53864]: /rc.newipsecdns: Static Routes: Gateway IP could not be found for 192.168.0.0/19
    

    BTW, I have ipv6 disabled (set to None on both LAN and WAN interface).

    1 Reply Last reply Reply Quote 1
    • L
      LinkP
      last edited by Aug 5, 2024, 9:32 PM

      I am also running pfSsense+ 24.03-RELEASE.

      I just discovered a similar issue today on null routed IPv6 networks when I went to add a new null route for the discard prefix 100::/64.

      My null routes are visible in the GUI, but do not appear in the FRR Zebra status output, and they are leaking to the default gateway from the CLI with both the route command and traceroute6.

      1 Reply Last reply Reply Quote 0
      • S
        stephenw10 Netgate Administrator
        last edited by Aug 5, 2024, 10:04 PM

        Hmm, that should be fixed but doesn't appear to be. Digging....

        1 Reply Last reply Reply Quote 2
        • S
          stephenw10 Netgate Administrator
          last edited by Aug 5, 2024, 10:34 PM

          Hmm, there was a bunch of work around gateways and I recall testing this at the time but it appears to be a regression: https://redmine.pfsense.org/issues/15669

          1 Reply Last reply Reply Quote 2
          1 out of 4
          • First post
            1/4
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
            This community forum collects and processes your personal information.
            consent.not_received