PFBlocker Package Error on load.
-
Hi Guys,
Installed PFblocker package. URLs included, update set for every 12 hours, block on WAN.
Aug 14 04:04:30 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded'
Aug 14 04:05:14 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"
Aug 14 04:05:14 php: : There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"
Log Entries Before this?
Aug 14 03:53:18 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:53:18 check_reload_status: Syncing firewall
Aug 14 03:53:19 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:53:19 check_reload_status: Reloading filter
Aug 14 03:55:58 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:55:58 check_reload_status: Syncing firewall
Aug 14 03:55:58 check_reload_status: Reloading filter
Aug 14 03:55:58 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:56:44 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:56:44 check_reload_status: Syncing firewall
Aug 14 03:56:44 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:56:44 check_reload_status: Reloading filter
Aug 14 03:58:04 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:58:04 check_reload_status: Syncing firewall
Aug 14 03:58:05 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:58:05 check_reload_status: Reloading filter
Aug 14 03:59:10 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:59:10 check_reload_status: Syncing firewall
Aug 14 03:59:10 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:59:10 check_reload_status: Reloading filter
Aug 14 03:59:41 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:59:41 check_reload_status: Syncing firewall
Aug 14 04:03:40 check_reload_status: Syncing firewall
Aug 14 04:03:41 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 04:03:41 check_reload_status: Reloading filter</pfblockerprimarythreats></pfblockerprimarythreats> -
You need to increase the max # of table entries under System > Advanced on the Firewall/NAT tab.
It's trying to load more IPs into tables than it's able to allocate memory for. -
Oh right, Thanks very much!
Man, logic will definitely make a thinker out of you!
thanks again for that, Jimp.
Jits
-
I have a simular issue with my pfSense installation. I get the following errors in the system log:
Aug 21 20:53:40 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded' Aug 21 20:53:59 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt" Aug 21 20:53:59 php: : There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt"I have replaced the names of the list with [CLEANED] :)
When I look at the pfBlocker configuration it's not even activated and does not have any lists configured. I have had it activated with lists configured before but the package has been reinstalled since then. Even if I uninstall the package I get the log errors. It looks to me like there are some config left from the old installation. How can I clean up all old config?
Thanks
