New alert found: There were error(s) loading the rules:



  • When updating (full install) to Dec. 1st snap, I am getting these errors on boot. [Please ignore the HAVP errors as I am working with dvserg about them].
    Noticed also, I can not browse the web, so I rolled back to the 2.0-BETA4 (i386) built on Mon Nov 29 17:36:11 EST 2010 .

    Dec 1 09:14:25 check_reload_status: reloading filter
    Dec 1 09:14:25 kernel: pflog0: promiscuous mode enabled
    Dec 1 09:14:26 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:14:27 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:27 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:27 apinger: Starting Alarm Pinger, apinger(36291)
    Dec 1 09:14:30 php: : ROUTING: add default route to X.X.X.X
    Dec 1 09:14:34 dhcpd: Internet Systems Consortium DHCP Server 4.1.1-P1
    Dec 1 09:14:34 dhcpd: Copyright 2004-2010 Internet Systems Consortium.
    Dec 1 09:14:34 dhcpd: All rights reserved.
    Dec 1 09:14:34 dhcpd: For info, please visit https://www.isc.org/software/dhcp/
    Dec 1 09:14:34 dnsmasq[55952]: started, version 2.55 cachesize 10000
    Dec 1 09:14:34 dnsmasq[55952]: compile time options: no-IPv6 GNU-getopt no-DBus I18N DHCP TFTP
    Dec 1 09:14:34 dnsmasq[55952]: reading /etc/resolv.conf
    Dec 1 09:14:34 dnsmasq[55952]: using nameserver 216.146.36.36#53
    Dec 1 09:14:34 check_reload_status: updating all dyndns
    Dec 1 09:14:34 dnsmasq[55952]: using nameserver 216.146.35.35#53
    Dec 1 09:14:34 dnsmasq[55952]: read /etc/hosts - 2 addresses
    Dec 1 09:14:36 kernel: ipfw2 (+ipv6) initialized, divert loadable, nat loadable, rule-based forwarding enabled, default to accept, logging disabled
    Dec 1 09:14:36 kernel: load_dn_sched dn_sched FIFO loaded
    Dec 1 09:14:36 kernel: load_dn_sched dn_sched QFQ loaded
    Dec 1 09:14:36 kernel: load_dn_sched dn_sched RR loaded
    Dec 1 09:14:36 kernel: load_dn_sched dn_sched WF2Q+ loaded
    Dec 1 09:14:36 kernel: load_dn_sched dn_sched PRIO loaded
    Dec 1 09:14:45 php: : rc.newwanip: Informational is starting vr0.
    Dec 1 09:14:45 php: : rc.newwanip: on (IP address: X.X.X.X) (interface: wan) (real interface: vr0).
    Dec 1 09:14:46 php: : ROUTING: change default route to X.X.X.X
    Dec 1 09:14:46 php: : DynDns: Running updatedns()
    Dec 1 09:14:46 php: : DynDns: updatedns() starting
    Dec 1 09:14:46 apinger: Exiting on signal 15.
    Dec 1 09:14:46 php: : DynDns: _detectChange() starting.
    Dec 1 09:14:46 php: : DynDns: _checkIP() starting.
    Dec 1 09:14:46 php: : DynDns debug information: X.X.X.X extracted from local system.
    Dec 1 09:14:46 php: : DynDns: Current WAN IP: X.X.X.X
    Dec 1 09:14:46 php: : DynDns: Cached IP: X.X.X.X
    Dec 1 09:14:46 apinger: Starting Alarm Pinger, apinger(20329)
    Dec 1 09:14:46 php: : phpDynDNS: No change in my IP address and/or 25 days has not passed. Not updating dynamic DNS entry.
    Dec 1 09:14:48 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:14:48 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:48 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:49 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:14:49 php: : Creating rrd update script
    Dec 1 09:14:49 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error /tmp/rules.debug:85: cannot define table bogons: Device busy pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:14:49 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:50 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:51 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:51 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:14:51 php: : Resyncing configuration for all packages.
    Dec 1 09:14:53 php: : The command 'ln -s /usr/local/bin/perl /usr/bin/perl' returned exit code '1', the output was 'ln: /usr/bin/perl: File exists'
    Dec 1 09:14:55 check_reload_status: syncing firewall
    Dec 1 09:14:56 dnsmasq[55952]: reading /etc/resolv.conf
    Dec 1 09:14:56 dnsmasq[55952]: using nameserver 216.146.36.36#53
    Dec 1 09:14:56 dnsmasq[55952]: using nameserver 216.146.35.35#53
    Dec 1 09:14:58 last message repeated 3 times
    Dec 1 09:15:31 php: : Starting Squid
    Dec 1 09:15:31 squid[20515]: Squid Parent: child process 21135 started
    Dec 1 09:15:32 check_reload_status: reloading filter
    Dec 1 09:15:32 squid[20515]: Squid Parent: child process 21135 exited due to signal 15
    Dec 1 09:15:49 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:15:49 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:15:49 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:16:00 php: : Starting Squid
    Dec 1 09:16:00 squid[63858]: Squid Parent: child process 320 started
    Dec 1 09:16:01 check_reload_status: reloading filter
    Dec 1 09:16:02 php: : The command 'chown -R -v havp /usr/local/etc/havp' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:02 php: : The command 'chown -R -v havp /var/tmp/havp' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:02 php: : The command 'chown -R -v havp /var/tmp/havpRAM' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:02 php: : The command 'chown -R -v havp /usr/local/share/examples/havp/templates' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:02 php: : The command 'chown -R -v havp /usr/local/share/examples/havp/templates_ex' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /var/log/havp' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /var/run/havp.pid' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /usr/local/etc/freshclam.conf' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /var/log/clamav' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /usr/local/etc/rc.d/havp_avupdate' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /usr/local/etc/clamd.conf' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : The command 'chown -R -v havp /usr/local/etc/havp' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:16:03 php: : Starting HAVP
    Dec 1 09:16:04 check_reload_status: syncing firewall
    Dec 1 09:16:32 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:16:34 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:16:34 php: : There were error(s) loading the rules: /tmp/rules.debug:83: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [83]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:16:58 php: : Reloading Squid for configuration sync
    Dec 1 09:16:58 check_reload_status: reloading filter
    Dec 1 09:16:58 php: : The command 'chown -R -v havp /usr/local/etc/freshclam.conf' returned exit code '1', the output was 'chown: havp: Invalid argument'
    Dec 1 09:17:01 check_reload_status: syncing firewall
    Dec 1 09:17:02 usbhid-ups[43567]: Startup successful
    Dec 1 09:17:02 upsd[43884]: listening on 0.0.0.0 port 3493
    Dec 1 09:17:02 upsd[43884]: Connected to UPS [XS1000]: usbhid-ups-XS1000
    Dec 1 09:17:02 upsd[44024]: Startup successful
    Dec 1 09:17:03 upsmon[44559]: Startup successful
    Dec 1 09:17:03 upsd[44024]: Client monuser@127.0.0.1 logged into UPS [XS1000]
    Dec 1 09:17:04 login: login on console as root
    Dec 1 09:17:05 sshlockout[48644]: sshlockout v2.0 starting up
    Dec 1 09:17:05 sshlockout[48644]: sshlockout v2.0 starting up
    Dec 1 09:17:28 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:97: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:17:29 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:97: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [97]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:17:29 php: : There were error(s) loading the rules: /tmp/rules.debug:97: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [97]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:18:57 check_reload_status: syncing firewall
    Dec 1 09:19:04 last message repeated 2 times
    Dec 1 09:19:04 php: /pkg_mgr_install.php: The command 'killall -9 havp' returned exit code '1', the output was 'No matching processes were found'
    Dec 1 09:19:06 check_reload_status: syncing firewall
    Dec 1 09:19:06 check_reload_status: reloading filter
    Dec 1 09:19:11 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:19:11 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:19:11 php: : There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:07 php: /pkg_edit.php: Reloading Squid for configuration sync
    Dec 1 09:20:07 check_reload_status: reloading filter
    Dec 1 09:20:08 check_reload_status: syncing firewall
    Dec 1 09:20:08 check_reload_status: reloading filter
    Dec 1 09:20:29 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:20:30 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:92: syntax error /tmp/rules.debug:94: cannot define table bogons: Device busy pfctl: Syntax error in config file: pf rules not loaded The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:30 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:20:30 php: : There were error(s) loading the rules: /tmp/rules.debug:92: syntax error /tmp/rules.debug:94: cannot define table bogons: Device busy pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:31 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:31 php: : There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:39 php: /pkg_edit.php: Reloading Squid for configuration sync
    Dec 1 09:20:39 check_reload_status: reloading filter
    Dec 1 09:20:43 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded'
    Dec 1 09:20:43 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:20:43 php: : There were error(s) loading the rules: /tmp/rules.debug:92: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [92]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 09:25:31 check_reload_status: syncing firewall
    Dec 1 09:25:32 syslogd: exiting on signal 15
    Dec 1 09:25:32 syslogd: kernel boot file is /boot/kernel/kernel</webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout></webconfiguratorlockout>



  • I got the same syntax error here on the Dec 1 snap.



  • Yes me too.. didn't have any connectivity from lan -> wan, but lan -> vpn worked.
    Pfsense itself had connectivity:

    
    php: : There were error(s) loading the rules: /tmp/rules.debug:82: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [82]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 16:33:57 	php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:82: syntax error pfctl: Syntax error in config file: pf rules not loaded The line in question reads [82]: block in log quick proto tcp from <webconfiguratorlockout>to any port label "webConfiguratorlockout"
    Dec 1 16:33:57 	php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:82: syntax error pfctl: Syntax error in config file: pf rules not loaded'</webconfiguratorlockout></webconfiguratorlockout> 
    

    I removed the whole line that adds this webconfigurator rule in filter.inc and everything was fine.



  • Hello

    Today upgraded (Auto Update) and got the same problem. There were no traffic from LAN > WAN but i was able to ssh into pfSense from outside.

    Removing the line as mxx says, solved the problem.  :)

    Best.



  • Where is the file that I need to edit. I SSH into my pfSense box, cd /tmp and then vi rules.debug I then delete the line stated my mxx, save the file with :q! and then reboot the pfsense box. The line keeps coming back.

    Sorry for being a noob.



  • Hi, I did this…

    (Changed "$webConfiguratorlockoutport" to "88") in /etc/inc/filter.inc:

    $ipfrules .= "block in log quick proto tcp from <webconfiguratorlockout>to any port {$webConfiguratorlockoutport} label "webConfiguratorlockout"\n";

    To:

    $ipfrules .= "block in log quick proto tcp from <webconfiguratorlockout>to any port { 88 } label "webConfiguratorlockout"\n";

    Now it seems to work just fine. I've set port 88 to configurate pfsense.</webconfiguratorlockout></webconfiguratorlockout>



  • Perfect, that fixed it!



  • Same problem here. (Fixed by editing)



  • I fixit.

    Modify /etc/inc/filter.inc

    2051 line

    	if(!isset($config['webgui']['port'])) {
    		if($config['webgui']['protocol'] == "http") 
    			$webConfiguratorlockoutport = "80";
    		elseif($config['webgui']['protocol'] == "https") 
    			$webConfiguratorlockoutport = "443";
    	} else {
    		$webConfiguratorlockoutport = $config['webgui']['port'];
    	}
    
    

    replace with

    	if(!isset($config['system']['webgui']['port'])) {
    		if($config['system']['webgui']['protocol'] == "http") 
    			$webConfiguratorlockoutport = "80";
    		elseif($config['system']['webgui']['protocol'] == "https") 
    			$webConfiguratorlockoutport = "443";
    	} else {
    		$webConfiguratorlockoutport = $config['system']['webgui']['port'];
    	}
    

Log in to reply