PFBlocker Package Error on load.

[jits]

Hi Guys,

Installed PFblocker package. URLs included, update set for every 12 hours, block on WAN.

Aug 14 04:04:30 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded'

Aug 14 04:05:14 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"

Aug 14 04:05:14 php: : There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"

Log Entries Before this?

Aug 14 03:53:18 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:53:18 check_reload_status: Syncing firewall
Aug 14 03:53:19 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:53:19 check_reload_status: Reloading filter
Aug 14 03:55:58 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:55:58 check_reload_status: Syncing firewall
Aug 14 03:55:58 check_reload_status: Reloading filter
Aug 14 03:55:58 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:56:44 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:56:44 check_reload_status: Syncing firewall
Aug 14 03:56:44 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:56:44 check_reload_status: Reloading filter
Aug 14 03:58:04 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:58:04 check_reload_status: Syncing firewall
Aug 14 03:58:05 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:58:05 check_reload_status: Reloading filter
Aug 14 03:59:10 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:59:10 check_reload_status: Syncing firewall
Aug 14 03:59:10 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 03:59:10 check_reload_status: Reloading filter
Aug 14 03:59:41 php: /pkg_edit.php: Starting pfBlocker sync process.
Aug 14 03:59:41 check_reload_status: Syncing firewall
Aug 14 04:03:40 check_reload_status: Syncing firewall
Aug 14 04:03:41 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
Aug 14 04:03:41 check_reload_status: Reloading filter</pfblockerprimarythreats></pfblockerprimarythreats>

[jimp]

You need to increase the max # of table entries under System > Advanced on the Firewall/NAT tab.
It's trying to load more IPs into tables than it's able to allocate memory for.

[jits]

Oh right, Thanks very much!

Man, logic will definitely make a thinker out of you!

thanks again for that, Jimp.

Jits

[klarback]

I have a simular issue with my pfSense installation. I get the following errors in the system log:

Aug 21 20:53:40	php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded'
Aug 21 20:53:59	php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt"
Aug 21 20:53:59	php: : There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt"

I have replaced the names of the list with [CLEANED] :)

When I look at the pfBlocker configuration it's not even activated and does not have any lists configured. I have had it activated with lists configured before but the package has been reinstalled since then. Even if I uninstall the package I get the log errors. It looks to me like there are some config left from the old installation. How can I clean up all old config?

Thanks