Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Alias URL Table with >4000 IP's

    Scheduled Pinned Locked Moved Firewalling
    2 Posts 2 Posters 954 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • V
      VipIT
      last edited by

      Hi,

      Anyone ever had issues with URL Tables in Aliasses?
      I am trying to block >4000 IP adresses located in a txt file on a webserver behind my pfsense firewall.
      Somehow this breaks the entire rule base.

      It even goes so far as turning the entire firewall in pass-pass mode and not looking or loading firewall rules.
      After adding the alias (just adding it, not creating a firewall rule yet), If I execute 'pfctl -sa , the'output doesn't even show any rules loaded into the firewall.
      When using a smaller number of IP adresses, like 2000 orso it works.

      Looking at the alias table, it only loads about 1999 ip's from the txt file.

      Anyone ever had this problem before?

      K.R.
      Ruben Vanhoutte

      1 Reply Last reply Reply Quote 0
      • BBcan177B
        BBcan177 Moderator
        last edited by

        Try to increase the "Firewall Maximum Table Entries" in System:Advanced:Firewall/NAT

        Maximum number of table entries for systems such as aliases, sshlockout, snort, etc, combined.

        "Experience is something you don't get until just after you need it."

        Website: http://pfBlockerNG.com
        Twitter: @BBcan177  #pfBlockerNG
        Reddit: https://www.reddit.com/r/pfBlockerNG/new/

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.