PFBlocker Package Error on load.



  • Hi Guys,

    Installed PFblocker package. URLs included, update set for every 12 hours, block on WAN.

    Aug 14 04:04:30 php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded'

    Aug 14 04:05:14 php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"

    Aug 14 04:05:14 php: : There were error(s) loading the rules: /tmp/rules.debug:25: cannot define table pfBlockerPrimaryThreats: Cannot allocate memory /tmp/rules.debug:27: cannot define table pfBlockerlevel1: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [25]: table <pfblockerprimarythreats>persist file "/var/db/aliastables/pfBlockerPrimaryThreats.txt"

    Log Entries Before this?

    Aug 14 03:53:18 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:53:18 check_reload_status: Syncing firewall
    Aug 14 03:53:19 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 03:53:19 check_reload_status: Reloading filter
    Aug 14 03:55:58 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:55:58 check_reload_status: Syncing firewall
    Aug 14 03:55:58 check_reload_status: Reloading filter
    Aug 14 03:55:58 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 03:56:44 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:56:44 check_reload_status: Syncing firewall
    Aug 14 03:56:44 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 03:56:44 check_reload_status: Reloading filter
    Aug 14 03:58:04 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:58:04 check_reload_status: Syncing firewall
    Aug 14 03:58:05 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 03:58:05 check_reload_status: Reloading filter
    Aug 14 03:59:10 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:59:10 check_reload_status: Syncing firewall
    Aug 14 03:59:10 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 03:59:10 check_reload_status: Reloading filter
    Aug 14 03:59:41 php: /pkg_edit.php: Starting pfBlocker sync process.
    Aug 14 03:59:41 check_reload_status: Syncing firewall
    Aug 14 04:03:40 check_reload_status: Syncing firewall
    Aug 14 04:03:41 php: /pkg_edit.php: [pfblocker] pfblocker_xmlrpc_sync.php is starting.
    Aug 14 04:03:41 check_reload_status: Reloading filter</pfblockerprimarythreats></pfblockerprimarythreats>


  • Rebel Alliance Developer Netgate

    You need to increase the max # of table entries under System > Advanced on the Firewall/NAT tab.
    It's trying to load more IPs into tables than it's able to allocate memory for.



  • Oh right, Thanks very much!

    Man, logic will definitely make a thinker out of you!

    thanks again for that, Jimp.

    Jits



  • I have a simular issue with my pfSense installation. I get the following errors in the system log:

    Aug 21 20:53:40	php: : The command '/sbin/pfctl -o basic -f /tmp/rules.debug' returned exit code '1', the output was '/tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded'
    Aug 21 20:53:59	php: : New alert found: There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt"
    Aug 21 20:53:59	php: : There were error(s) loading the rules: /tmp/rules.debug:17: cannot define table [CLEANED]: Cannot allocate memory /tmp/rules.debug:19: cannot define table pfBlockerLevel1: Cannot allocate memory /tmp/rules.debug:21: cannot define table [CLEANED]: Cannot allocate memory pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [17]: table <[CLEANED]> persist file "/var/db/aliastables/[CLEANED].txt"
    

    I have replaced the names of the list with [CLEANED] :)

    When I look at the pfBlocker configuration it's not even activated and does not have any lists configured. I have had it activated with lists configured before but the package has been reinstalled since then. Even if I uninstall the package I get the log errors. It looks to me like there are some config left from the old installation. How can I clean up all old config?

    Thanks


Locked