• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Ver 2.8.0 - PHP Fatal Error - Allowed memory size of 536870912 bytes exhausted

Scheduled Pinned Locked Moved General pfSense Questions
17 Posts 5 Posters 1.3k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    aster1x6467
    last edited by 26 days ago

    I think I've found a fix for it. After reading this (the same one I mentioned before), I enabled unbound python mode on pfblocker > DNSBL, and I also enabled python mode on the DNS resolver (unbound). This makes the python module script option show up, where after a DNSBL update, I can select pfb_unbound. This took care of the problem for me, or at least I haven't seen a new crash report in the few hours since I did this.

    I'm not sure if python mode is needed on both the DNS resolver and pfblocker, or if enabling just one of the two does the job, if someone tests that I would love to know. I'm also not sure about other side effects from enabling the python modules, but at least it fixes the problem with Kea DHCP and pfblocker not playing nicely.

    J 1 Reply Last reply 26 days ago Reply Quote 0
    • J
      Jungle153 @aster1x6467
      last edited by 26 days ago

      @aster1x6467

      Thank you for the comments.

      Since I have disabled IP4 and IP6 block lists the crash seems to have resolved. I have left DNSBL in unbound mode.

      I'll give it a day to see if anything crops up, if all works well I'll reactivate IP4 block lists to see if it's just a IP6 issue.

      I'll have a look at reporting a bug to the developers, I assume they'll have a GitHub page for it.

      Thanks again everyone for your help.

      S 1 Reply Last reply 26 days ago Reply Quote 0
      • S
        SteveITS Galactic Empire @Jungle153
        last edited by 26 days ago

        @Jungle153 said in Ver 2.8.0 - PHP Fatal Error - Allowed memory size of 536870912 bytes exhausted:

        reporting a bug to the developers, I assume they'll have a GitHub page

        https://redmine.pfsense.org/projects/pfsense-packages

        or more specifically,
        https://redmine.pfsense.org/projects/pfsense-packages/issues?utf8=%E2%9C%93&set_filter=1&sort=id%3Adesc&f%5B%5D=status_id&op%5Bstatus_id%5D=o&f%5B%5D=tracker_id&op%5Btracker_id%5D=%3D&v%5Btracker_id%5D%5B%5D=1&f%5B%5D=category_id&op%5Bcategory_id%5D=%3D&v%5Bcategory_id%5D%5B%5D=97&f%5B%5D=&c%5B%5D=tracker&c%5B%5D=category&c%5B%5D=status&c%5B%5D=priority&c%5B%5D=subject&c%5B%5D=assigned_to&c%5B%5D=updated_on&group_by=&t%5B%5D=

        Pre-2.7.2/23.09: Only install packages for your version, or risk breaking it. Select your branch in System/Update/Update Settings.
        When upgrading, allow 10-15 minutes to restart, or more depending on packages and device speed.
        Upvote 👍 helpful posts!

        J 1 Reply Last reply 26 days ago Reply Quote 0
        • J
          Jungle153 @SteveITS
          last edited by 26 days ago

          @SteveITS

          Thank you for that.

          @aster1x6467 My changes didn't work. Reduced the frequency of the crashes. Followed your lead and changed the pfBlocker mode to Python and all resolved by the look of it. I've left Unbound in it's default mode and looking at the various logs everything is working as expected.

          1 Reply Last reply Reply Quote 1
          • S
            stephenw10 Netgate Administrator
            last edited by 26 days ago

            Gah! I mistakenly wrote 'Unbound mode'. 😞

            Yes, use Python mode for DNS-BL to prevent hitting the PHP limit.

            J 1 Reply Last reply 26 days ago Reply Quote 0
            • J
              Jungle153 @stephenw10
              last edited by 26 days ago

              @stephenw10 😆

              No worries. It's all fixed now and new problem solving skills learned.

              @aster1x6467 @gerdesj @SteveITS
              I'd happily upvote all you comments, but apparently my reputation is too low.

              so to everyone:

              👍

              A 1 Reply Last reply 26 days ago Reply Quote 2
              • A
                aster1x6467 @Jungle153
                last edited by 26 days ago

                @Jungle153 Good to hear it worked for you too. Interesting to hear that python mode on the DNS resolver was not needed.

                As a follow-up to @stephenw10, do you know if enabling the python mode in the DNS resolver together with the DNSBL python mode has any benefits or other implications (since the DNSBL python mode needs to be enabled to avoid this error either way)? Or are these two completely unrelated?

                G 1 Reply Last reply 26 days ago Reply Quote 0
                • S
                  stephenw10 Netgate Administrator
                  last edited by 26 days ago

                  You need to have the python module enabled in Unbound in order to use Python mode in DNS-BL. I'm not aware of anything else that uses it.

                  1 Reply Last reply Reply Quote 0
                  • G
                    gerdesj @aster1x6467
                    last edited by 26 days ago

                    @aster1x6467 You do need to use the python module in Unbound (called the Resolver in pfSense) when using pfBlocker.

                    There are loads of docs on this by BB17 (I think that is their Nic) but why not start with https://docs.netgate.com/pfsense/en/latest/packages/pfblocker.html

                    1 Reply Last reply Reply Quote 1
                    • A
                      aster1x6467
                      last edited by 25 days ago

                      @stephenw10 @gerdesj Thank you both for the information. I am now looking at posts from BBCan177 and there are indeed plenty. As for the link to the official documentation of the pfblocker package, I'm afraid that it isn't of much help, the information there is somewhat limited.

                      Thanks to all for the conversation, this was very useful!

                      👍

                      1 Reply Last reply Reply Quote 1
                      17 out of 17
                      • First post
                        17/17
                        Last post
                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                        This community forum collects and processes your personal information.
                        consent.not_received