Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    HELP - pf 2.1 CONSTANSTLY crashing due to Filter Schedule

    Scheduled Pinned Locked Moved General pfSense Questions
    1 Posts 1 Posters 761 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      duanes
      last edited by

      OMG - I'm about to shoot this thing…..

      Apparently, there is a regression bug in 2.1 that was previously fixed in 2.0x.  In Proxy Filter - if there is ANY schedule for the filter rules, the box will crash HARD multiple times during the day.  Sometimes, the crash is bad enough that it will completely hang and has to be power cycled.

      The more schedule items, the more frequent the crashes.  In our case, we are a business and normally, facebook and video sites are blocked, but we have one schedule for Everyday 12-12:30p and a second schedule of Fri 11:30a-Noon that whitelists Facebook and video sites.  We are NOT running shalla list (as that also locks up the box when updating the blacklists).  These are simple filters using the standard proxy and squid packages.  If the admins look in the crash dumps, you should find atleast 1 dump per day, and often 3-5 dumps !!

      This same bug WAS in 2.01, but was fixed around 2.02 or .03 (can't remember). I believe that this patch didn't make it into the 2.1 code tree.  The blacklist crashes were never addressed.

      FWIW - I really do not know, but this feels like the problem is a buffer overrun in the tcp stack.  When the box gets busy updating or reloading filters, something overruns causing a kernel double panic.  However, I have NO IDEA how to see a list of critical buffers to watch highwater levels.  Any ideas or suggestions would get greatly appreciated.

      Is there a newer version or patches other than 2.1 release that might address the schedule crashes.

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.